Privacy policy

Rated Tradies operates this directory of Australian trade businesses. This policy explains how we handle personal information under the Privacy Act 1988 (Cth) and the Australian Privacy Principles.

If you create an account: your email address, your name, and the suburb you give us. Your password is stored only as a cryptographic hash. We cannot read it, and neither can anyone else, which is why a forgotten password is reset rather than looked up.

If you list a business: the trading name, trade type, service areas, contact phone, website, description, price range, ABN, and the licence and insurance details you supply.

If a business records a completed job: a description of the work, the suburb, the final cost, the dates, and the customer's email address so we can ask them to confirm it. That email address is visible only to us, not to the business that entered it, and not through any part of the site.

If you ask a business for a quote: your name, your email address, and, only if you choose to give them, your phone number and suburb, together with the description of the work you write. All of it is passed to the business you asked, because that is the entire point of sending it, and it is kept on your behalf so the request still reaches them if the email fails. It is not shown to any other business and it is never sold on as a lead.

If you write a review: your rating, your comments, and a display name derived from your account: a first name and a surname initial, not your full name.

Photographs uploaded by a business to illustrate its completed work.

Technical records: when something goes wrong we record the page, the error and, if you were signed in, your user ID, so the fault can be fixed. To limit abuse we also count requests against a one-way hash of the IP address. We do not store the address itself.

We do not take payments, so we hold no card or bank details. We do not buy personal information from data brokers, and we do not build profiles of you across other websites.

If you are signed in, your shortlist of saved trades is stored on your account so it follows you between devices. It is private to you: no business is told it is on anyone's shortlist. Signed out, the shortlist stays in your browser and never reaches us.

When someone asks to see a business's phone number or email, we count that so the business can see how much interest its listing is getting. The business is shown the totals only, never who you are, and never which listings any one person looked at.

Where we link to a mortgage broker or any other business, following that link takes you to their website. We do not send them your name, your contact details, or anything else about you. We have nothing to send, because we don't collect it for them.

Anything you then give that business is between you and them, under their privacy policy rather than ours.

We use one essential cookie, which keeps you signed in. There is no advertising cookie and no cross-site tracking, which is why you aren't asked to dismiss a consent banner.

We measure page views and loading performance through Vercel Analytics, which is aggregated and does not use cookies or identify individual visitors.

Our database, files and account records are held in Supabase's Sydney region (ap-southeast-2), so your information stays in Australia at rest.

The site itself is served by Vercel through a global network, which means page requests may be handled outside Australia. Transactional email is sent through Resend. Both are overseas providers, and using the site involves those disclosures.

When a business asks us to check its ABN, we send that ABN to the Australian Business Register. No personal information about consumers is sent.

A business profile, its confirmed jobs, its photographs and its reviews are public. That is the purpose of the directory.

Your email address is never published. A customer's email address attached to a job is not visible to the business or through the site. Review authors appear as a first name and an initial.

Account and business information is kept while the account is open, and removed when you delete it. Confirmed jobs and reviews remain part of a business's public record while its listing exists.

Error records are deleted after 30 days. Abuse-prevention counters are deleted after one day.

You don't have to ask us for any of this. In account settings you can correct your details, download a copy of everything we hold about you, change what we're allowed to email you, and delete your account outright.

If you'd rather we did it, or you can no longer sign in, email privacy@ratedtradies.com and we will respond within 30 days.

Deleting your account removes your profile and your reviews. Where a confirmed job forms part of another party's public record, we may retain the job itself with your personal details removed.

If you are unhappy with how we have handled your information, you can complain to us at privacy@ratedtradies.com. If you are not satisfied with our response, you can complain to the Office of the Australian Information Commissioner at oaic.gov.au.

If a breach occurs that is likely to result in serious harm, we will notify affected individuals and the Office of the Australian Information Commissioner as required by the Notifiable Data Breaches scheme.

If this policy changes materially we will update the date at the top of this page and, where the change affects you significantly, tell account holders by email.