This service is operated by Saburai Investments Pty Ltd (ABN 49 133 023 828). This Privacy Policy explains what personal information we collect, why we collect it, how we store and use it, and the rights you have over it. We comply with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).
- We do not process payments, and we do not hold, bank or handle scheme funds.
- We do not require identity documents. We do not collect driver licence, passport or Medicare details, and we do not ask for your date of birth.
- We do not collect credit card or bank account details from members.
- We do not sell, licence or export member data, and we do not share it with advertisers or data brokers.
- We do not conduct telemarketing or SMS marketing.
- We do not share your information with related financial services entities. Saburai Investments Pty Ltd does not operate a payments, banking, insurance or lending business.
- We do not use your job, quote or building records to train machine learning models.
01About this policy
This policy applies to personal information we collect through:
- The StrataTrade platform — our websites, applications and email communications
- Maintenance and repair requests submitted to a scheme by lot owners and residents, including through links or QR codes that do not require an account
- Our outreach to trade businesses and strata firms
- Direct communications with us (email, support enquiries, feedback)
It explains how we handle your information whether you are a registered member, a committee member given access by your scheme, an owner or resident submitting a request, a person we have contacted as part of platform outreach, or simply someone visiting the website.
02What we collect
The personal information we collect depends on how you interact with StrataTrade.
| You are… | We collect… |
|---|---|
| Strata or building manager | Name, business email, organisation name, postcode, role, account credentials, the schemes you are assigned to, and your activity within the platform |
| Self-managed scheme representative | Name, email, scheme details, role within the scheme, account credentials, and your activity within the platform |
| Committee member | Name, email, the scheme you belong to, your committee position where recorded, account credentials, and the questions, comments and decisions you record against jobs |
| Trade business | Business name, ABN, trade categories, licence numbers and registers, service area, contact email and phone, postcode, account credentials, profile details you choose to add, and the quotes and correspondence you submit |
| Lot owner or resident submitting a request | Your name and contact details, your lot or unit identifier, the description of the issue you report, any photographs you attach, and the date of the request |
| Outreach prospect | Business name, ABN (where publicly listed), business email, business phone, suburb or postcode, public licence information, and the source of the data |
| Website visitor | IP address, browser type, pages viewed, basic analytics events (no personal identification unless you sign up) |
We do not deliberately collect sensitive information (race, political opinions, health information, religious beliefs and the like) and we do not require it to use the platform.
Job, quote and building records
Beyond the categories above, the platform holds the records created while running a job. These include the description and location of the work, photographs and documents uploaded, quotes submitted by trade businesses including pricing and inclusions, questions and clarifications exchanged, recommendations recorded by a manager, decisions recorded by a committee, and the dates and identities attached to each of those actions.
These records often contain personal information — most commonly the names, roles and business contact details of the people who created them. They are held as records of the building rather than of the individual, and they are kept for longer than personal account data. This is explained under How long we keep it.
03How we collect it
We collect personal information in three main ways:
Directly from you
When you sign up, fill in a form, send us an email, claim a listing, or otherwise interact with the platform. This is the primary way we collect data on registered members.
Automatically as you use the platform
Through cookies, server logs, and analytics tools. This includes information like your IP address, the pages you visit, the actions you take, and the device you use.
From publicly available sources
For trade verification, we check the information you provide against publicly available registers. We may also collect publicly available business contact information for outreach purposes — see the section on cold outreach.
04Why we collect it
We collect and use personal information to:
- Provide the members directory — account management, verification, search functionality
- Verify trade businesses against state and territory licence registers
- Match members to relevant directory entries by trade category, service area, and region
- Communicate with you — transactional emails, account notifications, service updates
- Provide customer support and respond to your enquiries
- Send platform-related communications (with appropriate consent or implied consent under the Spam Act 2003 (Cth))
- Improve the platform — analyse usage patterns, troubleshoot issues, build features
- Detect, prevent, and investigate fraud, security incidents, scraping attempts, and breaches of our Terms
- Comply with legal obligations and respond to lawful requests from regulators or law enforcement
- For cold-outreach prospects: contact you about whether StrataTrade may be relevant to your business
05Cold outreach & prospect data
To grow the directory, we contact trade businesses and strata firms who might benefit from joining StrataTrade. The personal information used for this outreach is collected from publicly available sources, including:
- Public business directories
- Publicly available registers
- Publicly available business websites
- Public business listings
This outreach is conducted in accordance with the Spam Act 2003 (Cth). Where we email a business contact, we rely on the business-to-business consent pathway: we only contact addresses publicly listed by a business in connection with that business's commercial activities, and we only send messages relevant to those activities. Every outreach email contains:
- Clear identification of who we are (Saburai Investments Pty Ltd / StrataTrade)
- How to contact us
- A functional unsubscribe mechanism that takes effect immediately
If you're a cold-outreach recipient and you'd like us to remove your details:
- Use the unsubscribe link in any email we sent you, or
- Reply to the email asking to be removed, or
- Email hello@stratatrade.com.au with the address you'd like removed
We honour suppression requests across all brands operated by Saburai Investments Pty Ltd so that one request stops all future outreach from us.
07Where it's stored
StrataTrade's data — including all personal information of registered members — is stored in Australia. We have deliberately chosen Australian data residency to keep member data subject to Australian privacy law and out of foreign jurisdictions.
Some service providers (for example, email delivery providers) may process limited information through their own infrastructure, which can include international servers for transit. Where this happens, we ensure the provider is bound by appropriate data-handling protections.
08How long we keep it
We separate two kinds of information, because they exist for different reasons and are kept for different periods.
Your personal account data
The information that identifies you as a user: your name, contact details, credentials, preferences and settings.
- Active accounts — retained while your account is active.
- Closed accounts — we soft-delete your personal account data within 30 days of closure. A trade business listing is removed from view immediately on closure.
Building records
The records created while running a job on a scheme — job descriptions, photographs, documents, quotes, clarifications, recommendations and committee decisions — are kept as a record of the building they relate to, not as a record of the person who created them.
These records are retained after an individual's account is closed, and after a strata firm stops using the platform. There are three reasons for this:
- Schemes and their managers are subject to record-keeping obligations under strata legislation. A record that disappears when a person leaves is not a record.
- The record belongs to the scheme rather than to any individual. A committee is entitled to the history of decisions made about its own building, including decisions made by people who have since moved on.
- Removing one party's contribution would make what remains misleading. A quote comparison with a quote deleted out of it is worse than no comparison at all.
Where a building record contains your personal information, it is usually limited to your name, your business or role, and the actions you took. If you ask us to delete personal information that appears in a building record, we will assess the request against the grounds above, tell you what we can and cannot remove, and explain why. Where we can reduce what is held — for example by removing direct contact details that are no longer needed for the record to make sense — we will.
Everything else
- Outreach prospects — if you ask to be removed, we add your email to our permanent suppression list so we do not contact you again, and otherwise delete your prospect record, typically within 14 days.
- Suppression lists — retained indefinitely. This is what makes a removal request stick.
- Backups and audit logs — for security and resilience we retain backup data for limited periods after deletion from production, on a rolling schedule.
09Your rights
Under the Australian Privacy Act, you have the right to:
- Access — request a copy of the personal information we hold about you
- Correction — ask us to correct information that is inaccurate, out of date, or incomplete
- Deletion — ask us to delete your personal information, subject to lawful retention requirements
- Withdraw consent — where we rely on your consent for a particular use, you can withdraw it at any time
- Stop direct marketing — you can opt out of marketing or outreach communications at any time
To exercise any of these rights, email us at hello@stratatrade.com.au. We will respond within 30 days. If we cannot fulfil your request, we will explain why.
There is no fee for accessing your personal information, although we may charge a reasonable fee in unusual cases (for example, if a request is large or repetitive).
11Children
StrataTrade is a business platform intended for adults. We do not knowingly collect personal information from people under 18. If you become aware that someone under 18 has provided personal information to us, please contact us and we will delete it.
12Security
We take reasonable steps to protect personal information from misuse, loss, unauthorised access, modification, and disclosure. Our security measures include:
- Encryption of data in transit (TLS) and at rest (database-level encryption)
- Role-based access controls within our systems
- Row-level security policies that restrict who can see what data
- Rate limiting and abuse detection on the directory to deter automated scraping
- Regular review of access logs and unusual activity
- Physical security of data centres provided by our hosting partners
- Staff training on privacy and security obligations
No system is perfectly secure. If we become aware of a data breach that is likely to result in serious harm, we will comply with the Notifiable Data Breaches scheme — assessing the breach, notifying affected individuals, and notifying the Office of the Australian Information Commissioner (OAIC) where required.
13Changes to this policy
We may update this Privacy Policy from time to time, including to reflect changes to the platform, our practices, or applicable law. The "Last updated" date at the top of this page shows the most recent revision.
For material changes — including changes that broaden how we use your personal information — we will give you notice through email or in-platform notification before the change takes effect, where reasonably practicable.
14Complaints & contact
Contact us
For privacy questions, requests, or complaints, please contact us first:
- Email: hello@stratatrade.com.au
- Postal: Saburai Investments Pty Ltd, ABN 49 133 023 828
We aim to respond to privacy concerns within 30 days. If your concern is urgent, please indicate that in your email.
Office of the Australian Information Commissioner
If you're not satisfied with how we've handled a privacy concern, you can escalate to the Office of the Australian Information Commissioner (OAIC):
- Website: oaic.gov.au
- Phone: 1300 363 992
- Postal: GPO Box 5288, Sydney NSW 2001