Privacy Policy

Bond Back Pty Ltd (we, us, our) operates Bond Back (Platform), an Australian online marketplace connecting property managers and landlords (Listers) with ABN-verified professional cleaners (Cleaners) for end-of-lease and bond-related cleaning services, with a primary focus on the Sunshine Coast, Queensland, and availability across Australia where we operate.

We are committed to protecting your privacy. This Privacy Policy describes how we collect, hold, use, disclose, and otherwise manage personal information as defined in the Privacy Act 1988 (Cth) (Privacy Act), including in line with the APPs.

By accessing or using the Platform, you acknowledge that you have read this policy. If you do not agree with our practices, you should not use the Platform.

We may collect the following kinds of information, depending on how you use the Platform:

• Identity and account details: name, email address, phone number, date of birth (where collected), profile photo, roles (Lister/Cleaner), and authentication identifiers (including when you sign in via third-party providers such as Google).
• Business and tax information (Cleaners): Australian Business Number (ABN), business name, and related details you provide or that we validate against the Australian Business Register where enabled.
• Property and listing information: property addresses, suburb, state, postcode, property type, descriptions, photos, preferred dates, and other content you upload to listings or jobs.
• Job and communications data: bids, messages, dispute materials, checklists, reviews, and metadata associated with jobs and listings.
• Payment information: we use regulated payment service providers (including Stripe) to process payments. We do not store your full payment card numbers on our own servers; we may receive limited payment metadata (e.g. last four digits, brand, transaction IDs, amounts in AUD). Where we issue tax invoices or display fees on the Platform, amounts are generally in AUD and, unless clearly stated otherwise, inclusive of GST as applicable under the A New Tax System (Goods and Services Tax) Act 1999 (Cth).
• Technical and usage data: IP address, device type, browser, approximate location, cookies, session tokens, logs, and analytics necessary to secure and improve the Platform.
• Support and compliance records: correspondence with us, complaints, fraud-prevention signals, and records we are required to keep under Australian law.

We use personal information for purposes that are reasonably necessary for our functions and activities, including to:

• create and manage accounts, verify identity, and operate the marketplace;
• display listings, bids, profiles, and job-related information to other users as intended by the service;
• process payments, escrow, refunds, Service Fees, and GST reporting as applicable;
• communicate with you about your account, jobs, security, and service updates;
• detect, prevent, and investigate fraud, abuse, and unlawful activity;
• comply with legal obligations (including tax, record-keeping, and regulatory requests);
• improve the Platform, conduct analytics in aggregated or de-identified form where appropriate; and
• exercise or defend legal claims.

Where the Privacy Act requires us to use or disclose personal information only with consent, or for a permitted general situation or permitted health situation, we will comply with those requirements.

We may disclose personal information to:

• Other users: for example, Listers and Cleaners see information reasonably necessary to assess, perform, or administer a job (such as names, usernames, messages, listing/job details, and suburb/location as you provide it).
• Payment processors: including Stripe (and its affiliates) to process payments, payouts, identity verification, and fraud prevention in accordance with their terms and privacy policies.
• Service providers: hosting, email, SMS/push notifications, analytics, customer support tooling, and security vendors who assist us under contract and only to the extent needed to provide their services.
• Professional advisers: lawyers, accountants, and insurers, subject to confidentiality obligations.
• Law enforcement and regulators: where required or authorised by Australian law, court order, or legitimate regulatory request.
• Related bodies corporate or successors: in connection with a merger, acquisition, or sale of assets, subject to applicable law.

We do not sell your personal information to data brokers.

We use cookies and similar technologies (such as local storage) to maintain sessions, remember preferences, measure performance, and protect against abuse. Some cookies are essential; others help us understand how the Platform is used. Where required by law, we will obtain consent before using non-essential cookies.

You can control cookies through your browser settings; disabling certain cookies may affect functionality.

We implement reasonable technical and organisational measures to protect personal information from misuse, interference, loss, unauthorised access, modification, or disclosure. These measures may include encryption in transit, access controls, monitoring, and secure development practices.

We aim to store and process personal information primarily using infrastructure located in Australia where reasonably practicable for our core services. Some subprocessors (including global payment and authentication providers) may process limited data outside Australia as described in section 9.

No method of transmission over the internet is completely secure; we cannot guarantee absolute security.

Subject to the Privacy Act, you may have rights including to:

• Access the personal information we hold about you (APP 12);
• Correct personal information that is inaccurate, out-of-date, incomplete, irrelevant, or misleading (APP 13); and
• Complain about our handling of your personal information (see section 8).

There are exceptions under the Privacy Act (for example, certain commercially sensitive decisions or where access would unreasonably affect another person's privacy). Where we refuse access or correction, we will explain our reasons where we are required to do so.

Access and correction: you may request access to or correction of your personal information by contacting our Privacy Officer using the details below. We may ask you to verify your identity before responding.

Complaints: if you believe we have breached the APPs, please contact our Privacy Officer first so we can try to resolve the matter. If you are not satisfied with our response, you may complain to the Office of the Australian Information Commissioner (OAIC) — see www.oaic.gov.au.

Some of our service providers (including Stripe and certain authentication or email providers) may process data in countries outside Australia. Where we disclose personal information overseas, we take reasonable steps to ensure the overseas recipient complies with the APPs or that a permitted exception applies under the Privacy Act (for example, your informed consent or reasonable necessity for performance of a contract).

For privacy questions, access/correction requests, or complaints, contact our Privacy Officer at: bondback2026@gmail.com.

Bond Back Pty Ltd — Bond cleaning marketplace operating in Australia (including Sunshine Coast, QLD, and other regions as we expand).