BuyMate

Privacy notice

Draft for the invite-only pilot — under legal review

This is a working draft for pilot participants. It describes how BuyMate currently handles information and will be replaced by a reviewed privacy policy before general release.

Who we are

BuyMate is operated by Safe & Clean Services Pty Ltd (ABN 89 675 474 647). Contact: [privacy contact email]. Website: buymate.org.

What we collect

  • Your name, mobile number and business name, so you can sign in by SMS code and be identified to people you work with.
  • Referrals you send or receive, their status updates and notes.
  • Customer details a business enters to make a referral (for example name, phone, email, property address and a job description), together with a record of the customer's permission to share them.
  • Security records: sign-in attempts, a one-way scrambled form of your IP address, and an audit trail of actions.

How customer details are shared

A customer's details are shown only to the one professional they agreed to be referred to, only the specific details they agreed to, and only after that professional verifies their mobile number and accepts the job. If the customer withdraws permission, or the referral is withdrawn or declined, the details stop being shown. We do not sell personal information, and we never add customers to marketing lists.

Messages we send

We send transactional SMS: referral invitations and sign-in codes. Invitation texts never include a customer's name or address. Product news is sent only if you separately opt in, and you can opt out at any time.

Where information is stored

Data is stored in a database hosted in Sydney, Australia ([database provider]). The app is served from Sydney ([hosting provider]). SMS are sent through [SMS provider], an Australian provider. [Confirm each provider's storage locations and any overseas access for support.]

Keeping it secure

Sign-in uses one-time SMS codes; codes and session keys are stored only in scrambled (hashed) form. Every access to a referral is checked on our servers. Referral history and consent records cannot be altered after the fact.

Access, correction and complaints

You can ask to see or correct your information, or make a complaint, by emailing [privacy contact email]. If you are not satisfied with our response you can contact the Office of the Australian Information Commissioner (oaic.gov.au).

How long we keep it

[Retention periods to be set with legal advice.]