Tradie Card Privacy Policy

This policy applies to visitors, account holders, businesses using Tradie Card, and people who submit enquiries through a Tradie Card public profile.

This policy does not replace the privacy terms of independent third-party services such as Stripe or Google/Firebase. Those providers handle parts of your information under their own terms and policies.

• Account data: email address, authentication user ID, and sign-in method details (email/password or Google sign-in).
• Business profile data: first and last name, business name, business owner name, ABN, suburb/city/state/postcode, service areas, service categories, and other profile details entered in onboarding and the profile builder.
• Contact and lead data: lead email, phone, enquiry details, service request details, source path, and enquiry timestamps.
• Media and content data: uploaded profile photos, hero images, gallery images, social links, website links, and business description content.
• Billing metadata: subscription status, billing interval, amount, Stripe customer/subscription identifiers, and payment timestamps.
• Technical and security data: user-agent data on lead submissions, request metadata, and operational logs generated by our hosting and infrastructure providers.
• Essential browser data: cookies or local browser storage used for authentication/session handling and basic product preferences.

• Directly from you when you sign up, complete onboarding, edit your profile, upload media, start billing, or contact us.
• From people who submit enquiries through a published Tradie Card business page.
• Automatically through platform operation and security controls when requests are sent to our services.
• From integrated providers (for example Stripe and Firebase) where required to operate account, billing, and hosting functions.

• To create and manage user accounts and authentication sessions.
• To create, host, and display business profiles and associated media.
• To route lead enquiries to the relevant business inbox and dashboard.
• To process subscription billing, payment state changes, and billing support workflows.
• To validate profile integrity (for example ABN and location format checks).
• To secure the platform, prevent abuse, troubleshoot issues, and improve service reliability.
• To respond to support, legal, and privacy enquiries.

Tradie Card public profiles are designed to be indexed and viewed publicly when a business publishes its profile. Information that may become public includes business name, services, service locations, description, social links, website links, profile images, and contact details entered for public display.

You are responsible for the information you choose to publish publicly. Search engines and third parties may cache or copy publicly available information.

When a customer submits an enquiry through a business page, we store that enquiry in the relevant business lead records so it can be viewed in the account dashboard.

Lead records are only available to the relevant authenticated business account and authorised platform operators where needed for support, security, abuse prevention, or legal compliance.

Subscription payments are processed by Stripe. Payment card details are collected and processed by Stripe in its checkout and billing portal environments. Tradie Card does not store full payment card numbers or CVC data.

We store billing metadata needed to operate subscriptions and account entitlements, including Stripe customer IDs, subscription state, interval, and transaction timestamps.

• Google Firebase/Google Cloud: authentication, database hosting, server execution, and storage infrastructure.
• Stripe: payment processing, subscription billing, and billing portal operations.
• Professional advisers, regulators, law enforcement, or courts where disclosure is required by law or reasonably necessary to protect legal rights and platform safety.

Our infrastructure and payment providers may process or store information outside Australia, including in jurisdictions where those providers operate global infrastructure.

Where personal information is disclosed overseas, we take reasonable steps to work with providers that implement contractual and technical safeguards appropriate to the service.

We use technical and organisational controls designed to reduce unauthorised access and misuse, including authenticated API access, Firestore access controls, webhook signature checks for Stripe events, and baseline security headers at the web layer.

No internet-based service is completely secure. We cannot guarantee absolute security, but we take reasonable steps to protect information handled through the platform.

We keep information for as long as needed to run the service, maintain account history, resolve disputes, and satisfy legal, accounting, and tax obligations.

Retention timeframes vary by data type. Billing records and related audit information may be retained longer than profile content where required by law or operational necessity.

You can update most business profile data directly from the Tradie Card dashboard.

For access, correction, or deletion requests that are not available in-product, contact hello@tradiecard.au. We may need to verify your identity before processing requests.

Some records may be retained where required for legal compliance, fraud prevention, or legitimate business record-keeping.

If you have a privacy complaint, contact hello@tradiecard.au first and we will investigate and respond within a reasonable timeframe.

If you are not satisfied with our response, you can lodge a complaint with the Office of the Australian Information Commissioner (OAIC).

We may update this Privacy Policy when product features, legal requirements, or data handling practices change. We will update the Last Updated date when changes are made.

Privacy contact: hello@tradiecard.au

Tradie Card is operated by ABK Digital (ABN 73 674 188 619).