Saburai Investments Pty Ltd (ABN 49 133 023 828) operates StrataTrade. This Privacy Policy explains what personal information we collect, why we collect it, how we store and use it, and the rights you have over it. We comply with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).
01About this policy
This policy applies to personal information we collect through:
- The StrataTrade members directory (websites, applications, and email communications)
- Our cold outreach to potential trade businesses and strata managers
- Direct communications with us (email, support enquiries, feedback)
It explains how we handle your information whether you're a registered member, a person we've contacted as part of platform outreach, or simply someone visiting the website.
02What we collect
The personal information we collect depends on how you interact with StrataTrade. The table below summarises the main categories.
| You are… | We collect… |
|---|---|
| Strata or building manager | Name, business email, organisation name, postcode, role, account credentials, search activity within the directory |
| Trade business | Business name, ABN, trade categories, licence numbers and registers, service area, contact email and phone, postcode, account credentials, profile details you choose to add |
| Cold-outreach prospect | Business name, ABN (where publicly listed), business email, business phone, suburb/postcode, public licence information, source of the data |
| Website visitor | IP address, browser type, pages viewed, basic analytics events (no personal identification unless you sign up) |
We do not deliberately collect sensitive information (race, political opinions, health information, religious beliefs, etc.) and we do not require it to use the platform.
03How we collect it
We collect personal information in three main ways:
Directly from you
When you sign up, fill in a form, send us an email, claim a listing, or otherwise interact with the platform. This is the primary way we collect data on registered members.
Automatically as you use the platform
Through cookies, server logs, and analytics tools. This includes information like your IP address, the pages you visit, the actions you take, and the device you use.
From publicly available sources
For trade verification, we check the information you provide against publicly available registers. We may also collect publicly available business contact information for outreach purposes — see the section on cold outreach.
04Why we collect it
We collect and use personal information to:
- Provide the members directory — account management, verification, search functionality
- Verify trade businesses against state and territory licence registers
- Match members to relevant directory entries by trade category, service area, and region
- Communicate with you — transactional emails, account notifications, service updates
- Provide customer support and respond to your enquiries
- Send platform-related communications (with appropriate consent or implied consent under the Spam Act 2003 (Cth))
- Improve the platform — analyse usage patterns, troubleshoot issues, build features
- Detect, prevent, and investigate fraud, security incidents, scraping attempts, and breaches of our Terms
- Comply with legal obligations and respond to lawful requests from regulators or law enforcement
- For cold-outreach prospects: contact you about whether StrataTrade may be relevant to your business
05Cold outreach & prospect data
To grow the directory, we contact trade businesses and strata firms who might benefit from joining StrataTrade. The personal information used for this outreach is collected from publicly available sources, including:
- Public business directories
- Publicly available registers
- Publicly available business websites
- Public business listings
This outreach is conducted in accordance with the Spam Act 2003 (Cth). Where we email a business contact, we rely on the business-to-business consent pathway: we only contact addresses publicly listed by a business in connection with that business's commercial activities, and we only send messages relevant to those activities. Every outreach email contains:
- Clear identification of who we are (Saburai Investments Pty Ltd / StrataTrade)
- How to contact us
- A functional unsubscribe mechanism that takes effect immediately
If you're a cold-outreach recipient and you'd like us to remove your details:
- Use the unsubscribe link in any email we sent you, or
- Reply to the email asking to be removed, or
- Email hello@stratatrade.com.au with the address you'd like removed
We honour suppression requests across all brands operated by Saburai Investments Pty Ltd so that one request stops all future outreach from us.
07Where it's stored
StrataTrade's data — including all personal information of registered members — is stored in Australia. We have deliberately chosen Australian data residency to keep member data subject to Australian privacy law and out of foreign jurisdictions.
Some service providers (for example, email delivery providers) may process limited information through their own infrastructure, which can include international servers for transit. Where this happens, we ensure the provider is bound by appropriate data-handling protections.
08How long we keep it
We keep personal information only for as long as we need it for the purposes described in this policy, or as required by law.
- Active member accounts: we retain account data for as long as your account is active.
- Closed accounts: when you close your account, we soft-delete your personal account data within 30 days. Your trade listing (if applicable) is removed from the directory immediately on closure.
- Cold-outreach prospects: if you ask to be removed, we add your email to our permanent suppression list (so we don't contact you again) and otherwise delete your prospect record, typically within 14 days.
- Suppression lists: we retain suppression records indefinitely to ensure we don't contact you again. This is required to honour your removal request.
- Backups and audit logs: for security and resilience, we retain backup data for limited periods even after deletion from production. We delete backup data on a rolling schedule.
09Your rights
Under the Australian Privacy Act, you have the right to:
- Access — request a copy of the personal information we hold about you
- Correction — ask us to correct information that is inaccurate, out of date, or incomplete
- Deletion — ask us to delete your personal information, subject to lawful retention requirements
- Withdraw consent — where we rely on your consent for a particular use, you can withdraw it at any time
- Stop direct marketing — you can opt out of marketing or outreach communications at any time
To exercise any of these rights, email us at hello@stratatrade.com.au. We will respond within 30 days. If we cannot fulfil your request, we will explain why.
There is no fee for accessing your personal information, although we may charge a reasonable fee in unusual cases (for example, if a request is large or repetitive).
11Children
StrataTrade is a business platform intended for adults. We do not knowingly collect personal information from people under 18. If you become aware that someone under 18 has provided personal information to us, please contact us and we will delete it.
12Security
We take reasonable steps to protect personal information from misuse, loss, unauthorised access, modification, and disclosure. Our security measures include:
- Encryption of data in transit (TLS) and at rest (database-level encryption)
- Role-based access controls within our systems
- Row-level security policies that restrict who can see what data
- Rate limiting and abuse detection on the directory to deter automated scraping
- Regular review of access logs and unusual activity
- Physical security of data centres provided by our hosting partners
- Staff training on privacy and security obligations
No system is perfectly secure. If we become aware of a data breach that is likely to result in serious harm, we will comply with the Notifiable Data Breaches scheme — assessing the breach, notifying affected individuals, and notifying the Office of the Australian Information Commissioner (OAIC) where required.
13Changes to this policy
We may update this Privacy Policy from time to time, including to reflect changes to the platform, our practices, or applicable law. The "Last updated" date at the top of this page shows the most recent revision.
For material changes — including changes that broaden how we use your personal information — we will give you notice through email or in-platform notification before the change takes effect, where reasonably practicable.
14Complaints & contact
Contact us
For privacy questions, requests, or complaints, please contact us first:
- Email: hello@stratatrade.com.au
- Postal: Saburai Investments Pty Ltd, ABN 49 133 023 828
We aim to respond to privacy concerns within 30 days. If your concern is urgent, please indicate that in your email.
Office of the Australian Information Commissioner
If you're not satisfied with how we've handled a privacy concern, you can escalate to the Office of the Australian Information Commissioner (OAIC):
- Website: oaic.gov.au
- Phone: 1300 363 992
- Postal: GPO Box 5288, Sydney NSW 2001