Privacy Policy

TheLocalList ("we", "us", or "our") operates the website thelocallist.com.au (the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). Please read this policy carefully. By using the Service, you consent to the practices described below.

1. Information We Collect

We collect information you provide directly to us, information collected automatically when you use the Service, and information from third-party sources.

Information you provide

• Account information: name, email address, password, and phone number when you create an account.
• Business listing data: business name, ABN, address, phone, website URL, business description, category, and images you upload.
• Payment information: billing name and address. Card details are processed directly by Stripe and are not stored on our servers.
• Communications: messages you send us via the contact form or email.

Information collected automatically

• Log data: IP address, browser type and version, pages visited, time and date of visits, and referring URLs.
• Device information: device type, operating system, and unique device identifiers.
• Usage data: search queries entered, listings viewed, and actions taken within the Service.

2. How We Use Your Information

We use the information we collect for the following purposes:

• To create and manage your account and business listings.
• To verify your ABN against the Australian Business Register (ABR).
• To process payments for Pro subscriptions through Stripe.
• To send transactional emails such as registration confirmations, billing receipts, and listing alerts.
• To send service-related communications, including updates to these policies or changes to features.
• To improve the Service through analytics and user feedback.
• To detect, investigate, and prevent fraudulent or unlawful activity.
• To comply with our legal obligations under Australian law.

We will not sell, rent, or trade your personal information to third parties for their marketing purposes.

3. Cookies

We use cookies and similar tracking technologies to operate the Service, remember your preferences, and analyse usage patterns.

• Essential cookies: required for the Service to function (authentication sessions, CSRF protection).
• Analytics cookies: used by Google Analytics to help us understand how visitors interact with the Service. Data is aggregated and anonymised where possible.
• Preference cookies: remember your settings such as search filters and location preferences.

You can control cookies through your browser settings. Disabling essential cookies may affect the functionality of the Service.

4. Third-Party Services

We share information with the following third parties as necessary to operate the Service:

• Stripe: Payment processing for Pro subscriptions. Stripe collects and processes card data directly under their own Privacy Policy (stripe.com/au/privacy). We receive only non-sensitive billing confirmation data.
• Google Analytics: We use Google Analytics to measure traffic and usage on the Service. Google may process data in accordance with their Privacy Policy (policies.google.com/privacy). You can opt out via the Google Analytics opt-out browser add-on.
• Australian Business Register (ABR): We query the ABR to verify ABN details. No personal data is sent to the ABR - only the ABN number submitted during registration.

5. Data Retention

We retain your personal information for as long as your account is active or as needed to provide the Service. If you close your account, we will delete or anonymise your personal information within 90 days, except where we are required to retain it for legal or compliance purposes (for example, financial records required under the Corporations Act 2001 (Cth) for up to 7 years).

Server log data is retained for up to 12 months for security and diagnostic purposes.

6. Your Rights Under the Australian Privacy Act

Under the Privacy Act 1988 (Cth) and the Australian Privacy Principles, you have the right to:

• Access: Request a copy of the personal information we hold about you.
• Correction: Request that we correct inaccurate or incomplete personal information.
• Complaints: Lodge a complaint if you believe we have breached the APPs. We will investigate and respond within 30 days.
• Opt out of direct marketing: Unsubscribe from any marketing communications at any time using the unsubscribe link or by contacting us.

If you are not satisfied with our response to a complaint, you may contact the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.

7. Security

We implement industry-standard security measures including HTTPS encryption, hashed password storage, and access controls to protect your personal information. However, no method of transmission over the internet is completely secure, and we cannot guarantee absolute security.

8. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify registered users by email and update the "Last updated" date at the top of this page. Continued use of the Service after any changes constitutes acceptance of the updated policy.

9. Contact

If you have any questions about this Privacy Policy, wish to exercise your rights, or want to make a complaint, please contact us at: