Privacy Policy

Primary storage: your account, quotes, invoices, customer records, documents and job-site media are currently stored on servers operated by Hostinger in Germany (in the European Union), which is outside Australia. We plan to move this to Amazon Web Services in Sydney, Australia once that infrastructure is live. This page states where data is held today.

Other countries: some of the services we use also handle your data in other places. For example, email is sent from Sydney, and card payments are handled by Stripe. The list of services that handle your data shows each one and where it operates.

A. Account & business registration data

• Identity details: full name, business email address, and mobile phone number.
• Business credentials: sole trader or company name, Australian Business Number (ABN), Australian Company Number (ACN), physical operating address, and trade licence numbers.
• Billing records: direct-debit or payment card details (tokenised and processed exclusively via our PCI-DSS compliant payment processor; we do not store raw card numbers on our infrastructure).

B. Contractor operational data (customer & job records)

• Client contact names, residential/commercial job-site addresses, telephone numbers, and email addresses.
• Job descriptions, line-item pricing, subcontractor allocations, site photographs, and invoice states.

You acknowledge that you are responsible for ensuring that you have obtained all necessary consents from your clients to input their contact and job details into the Service for communication and invoicing purposes.

C. Telemetry & automated interactions

• Telecommunications & message transmission logs (including timestamps, routing identifiers, and delivery receipts for customer communications, dispatch alerts, and service notifications).
• Device diagnostics, browser type, IP addresses, session identifiers, and audit logs recorded when accessing the platform.

1. Directly from you: when completing registration forms, configuring business settings, creating invoices, or communicating with support.
2. Automatically via platform use: through secure session cookies, operational logging, and webhook callbacks from payment processors and SMS gateways.

We collect and process your personal information to:

• verify business identity, ABN credentials, and maintain platform security;
• provide, run, maintain, and upgrade the SkoldTrades operational platform;
• facilitate client dispatch notices, quote acceptances, and compliant tax invoice generation;
• process card payments made to you through the platform;
• send essential operational notices, security alerts, and legislative updates regarding our tools;
• comply with statutory obligations under Australian taxation, corporate, and fair trading laws.

We do not sell, rent, or trade your personal data, job records, or customer databases to data brokers, advertising networks, or third-party lead generators.

We disclose personal information strictly on a need-to-know basis to:

• Infrastructure providers: our hosting provider, Hostinger (servers in Germany), and, for sending email, Amazon Web Services (Sydney, Australia). Each is listed, with where it operates, on our list of services that handle your data.
• Payment gateways: certified payment processors (e.g. Stripe Payments Australia Pty Ltd) for merchant underwriting and card processing.
• Telecommunications gateways: email delivery partners and, only if you turn on SMS or phone features, telephony and SMS providers. Telecommunications & message transmission logs (including timestamps, routing identifiers, and delivery receipts for customer communications, dispatch alerts, and service notifications).
• Law enforcement & regulators: where required or authorised by Australian law, court subpoena, or regulatory directive.

Encryption: data in transit is protected using TLS. Access tokens for connected third-party services (for example your calendar) are stored encrypted.

Access control: multi-tenant PostgreSQL configurations employ strict Row-Level Security (RLS) policies designed to prevent cross-account or cross-tenant data leaks.

Retention: we retain account and transactional records for a minimum of seven (7) years to comply with Australian Taxation Office (ATO) statutory reporting requirements. Some operational records, such as sign-up attempts and message logs, are de-identified after 12 or 24 months. Job photos and documents you upload stay until you ask us to remove them.

Under the Privacy Act (APPs 12 and 13), you have the right to request access to personal information we hold about you and request corrections if that information is inaccurate, out of date, or incomplete.

To submit a request, contact our Privacy Officer using the details below. We will respond to your request and may need to verify your identity before releasing or changing records.

What we collect: when you use the free visibility audit tool, we collect the business name and suburb you enter, your email address, the scorecard we show you, and the IP address of the device you used. The audit does not sign you up to marketing.

Why: to produce and keep a record of the scorecard you asked for, and to limit misuse of the tool (the IP address).

Who we send it to: to produce the score we send the business name and suburb you enter to Google (its Places service) to find your public business listing, and your business’s public website address to Google (PageSpeed Insights) to measure how fast the site loads. Google operates outside Australia. We do not send your email address to Google.

How long we keep it: 24 months from the date of your audit. After that we replace your email address with a placeholder and remove your mobile number and IP address. We keep the business name, suburb and scores, and the record of your marketing choice, which are not needed to identify you personally.

Access and deletion: you can ask for the details we hold about you, ask us to correct them, or ask us to delete them earlier than 24 months, by contacting the Privacy Officer using the details in section 9.

If you have questions regarding this policy or believe we have breached the Australian Privacy Principles, submit your complaint in writing to:

Privacy Officer
Mnemosyne Books Pty Ltd trading as SkoldTrades
Suite 117, 530 Little Collins Street, Melbourne VIC 3000, Australia
Please email us at info[at]mnemosynebooks.com. If your message is a privacy request or complaint, put ‘Privacy request’ in the subject line.

We investigate all complaints promptly. If you are unsatisfied with our response, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC):
Web: www.oaic.gov.au
Phone: 1300 363 992