AusLocal

Privacy Policy

Last updated 2 August 2026 · Draft pending final legal review

This policy explains how AusLocal (auslocal.au), operated by EN ER Theodorou (ABN 19 245 621 227), collects, uses, and discloses personal information, consistent with the Australian Privacy Principles in the Privacy Act 1988 (Cth).

1. What we collect

Business listing information: business names, ABNs, locations, categories, and contact details, compiled from public sources — the Australian Business Register (ABN Lookup) and public web listings (Google Places) — and from businesses that claim and edit their listings. For sole traders, some of this (e.g. a personal name used as a business name) is personal information.

Account information: the email address used for passwordless sign-in, and dashboard activity for claimed listings.

Quote requests: the name, email, optional phone number, and request details a consumer submits to contact a business.

Reviews: review content and ratings, linked to the completed quote request that authorised them.

Technical data: standard server logs (IP address, browser type, pages visited) used for security and site operation. We use a session cookie for sign-in; we do not run third-party advertising trackers.

2. How we use it

To operate the directory: publishing and ranking listings, passing quote requests to the right business, verifying that reviews follow a real completed transaction, sending transactional email (sign-in links, quote notifications, listing lifecycle notices), and processing Premium subscriptions.

We also send businesses a short sequence of emails about their listing (for example, an invitation to claim it). Every such email includes an unsubscribe link, honoured immediately. Unsubscribing from emails is separate from requesting removal of the listing itself.

3. Aggregated demand data

We may compile and commercialise aggregated, de-identified demand statistics (for example, "quote requests for carpet cleaning in Parramatta grew 30% this quarter"). This data never identifies an individual consumer, and we do not sell personal information.

4. Who we disclose it to

Service providers who process data on our behalf: Railway (hosting and database, servers located in the United States), Stripe (payments), Resend (transactional email), and Google (Places API during listing discovery). Each receives only what its function requires. Because hosting is currently in the United States, the information listed above is stored overseas; we take reasonable steps to ensure providers handle it consistently with the Australian Privacy Principles.

We do not otherwise share personal information unless required by law or with your consent.

5. Security and retention

Data is encrypted in transit, access to production systems is restricted, and sign-in is passwordless (no password database to breach). We retain information while it remains relevant to operating the directory: quote requests and reviews are retained to preserve review integrity; unclaimed listings are re-verified after 12 months and removed if they can no longer be confirmed.

6. Access, correction, and deletion

You may request access to, correction of, or deletion of your personal information via the privacy request form. Businesses may request full removal of their listing (delisting). We acknowledge these requests within 5 business days and resolve them within 30 days. Where we must retain a minimal record (for example, to honour a do-not-relist request or meet a legal obligation), we tell you what is kept and why.

7. Complaints

If you believe we have mishandled your personal information, contact us first via the contact form — we take complaints seriously and will respond within 30 days. If you are not satisfied with our response, you can complain to the Office of the Australian Information Commissioner (oaic.gov.au).

8. Changes

We may update this policy as the service evolves; the date above always reflects the current version, and material changes will be noted on this page.