Privacy Policy
1. Who we are
This privacy policy applies to tradez.au and the related sister site x10.au. Both are operated by Alex from Sydney, Australia. You can reach us at alex@tradez.au.
We comply with the Australian Privacy Principles under the Privacy Act 1988 (Cth) and, where applicable, the GDPR for visitors from the EU.
2. What we collect
2.1 From visitors
When you visit the Site, our infrastructure (Cloudflare) automatically logs:
- Your IP address (truncated for privacy after 7 days)
- The page you requested and the time of the request
- Your user-agent string (browser + operating system)
- The referring URL, if any
This is standard server-log data used to diagnose issues, detect abuse, and produce aggregate traffic statistics. We don't run third-party analytics (no Google Analytics, no Facebook Pixel) on the directory pages. If you grant location permission, we use your latitude/longitude only in your browser to suggest nearby suburbs — coordinates are not sent to our servers.
2.2 From listed businesses
For directory listings, we collect publicly available information from sources including Google Maps, Yellow Pages, social media profiles, the Australian Business Register and business websites:
- Business name, category, address, phone number
- Website URL (if any), social media handles, opening hours
- Aggregate ratings and review counts (not individual reviewer data)
- ABN and ABN status (where listed publicly on abr.business.gov.au)
We do not collect personal information about owners or staff beyond what is publicly attached to the business itself.
2.3 From customers (paid site builds)
If you become a paying customer, we collect what's needed to deliver the service:
- Contact name and email
- Business details to put on your site (services, hours, contact methods)
- Photos and copy you supply
- Payment metadata (transaction ID, amount, date) — full payment card details are handled by our payment processor (Stripe / PayID) and never touch our systems
- Invoice records (kept for 7 years per ATO requirements)
2.4 From people who contact us
If you email us, we keep the email thread for as long as needed to respond and resolve any related matter. After that, we may keep it for record-keeping but will delete on request.
3. How we use it
- Operate the directory — display listings and let visitors search, sort and filter.
- Build & host customer sites — render content, serve pages, manage subdomains.
- Outreach to potential customers — contact businesses without websites to offer our service. You can opt out at any time and we'll add you to our "do not contact" list.
- Billing & tax — issue invoices, process renewals, comply with ATO record-keeping.
- Improve the Site — diagnose bugs, detect abuse, add features.
4. Who we share it with
We do not sell your personal information. We share data only with:
- Cloudflare — for hosting and CDN. Server logs are processed in their global infrastructure.
- Stripe / PayID — for payment processing. They handle card data; we only see metadata.
- Email providers — for sending transactional emails (renewal reminders, etc.).
- The Australian Tax Office — when legally required (e.g. invoice records on audit).
- Law enforcement — only when compelled by a valid Australian legal request.
5. Cookies & tracking
The directory pages do not set tracking cookies. We use one optional sessionStorage entry to remember your set location for the duration of your browser session — you can clear this any time by closing the tab.
Customer sites built by us do not include third-party trackers by default. If a customer requests Google Analytics or similar on their own site, that's their choice and their privacy policy applies.
6. Your rights
Under Australian law, you can:
- Access any personal information we hold about you.
- Correct inaccurate information.
- Request deletion of your data, subject to legal record-keeping requirements (e.g. tax invoices).
- Withdraw consent for any future processing.
- Complain to the Office of the Australian Information Commissioner (oaic.gov.au) if you believe we've mishandled your data.
To exercise any of these rights, email alex@tradez.au with the subject "Privacy request" and tell us what you want us to do. We'll respond within 14 days.
7. Removing your business listing
If you don't want your business listed in the directory, email alex@tradez.au with the business name and suburb. We'll:
- Remove the listing from the next directory build (within 2 working days)
- Add the business to our internal "do not contact" list
- Stop including it in any future scrape or outreach
You don't need to give a reason. There's no charge.
8. Data security
We protect data with reasonable technical and organisational measures: HTTPS everywhere, edge-hosted infrastructure, encrypted backups, limited internal access, and standard secrets management. No system is perfectly secure; if we discover a breach affecting your personal information, we'll notify you within 72 hours where the law requires it.
9. International transfers
Cloudflare's edge network spans many countries. Your request data may be processed in the nearest Cloudflare data centre, which may be outside Australia. By using the Site, you consent to this. Cloudflare contracts include standard data-protection clauses.
10. Children
The Site is not directed to children under 16 and we don't knowingly collect their information.
11. Changes to this policy
We may update this policy. The current version is always at tradez.au/privacy. Material changes will be flagged with a banner for at least 7 days.
12. Contact
Privacy questions, requests or complaints: