Tradel Privacy Policy
Last updated: 3 September 2026
1. About Tradel and the scope of this policy
Zzed Holdings Pty Ltd (ABN 41 673 548 635) (trading as Tradel) ("Tradel", "we", "us", "our") provides an online platform and mobile application that allows tradespeople and businesses ("Users") to order and manage the delivery of goods to construction sites across Australia ("Services"). This Privacy Policy sets out how we collect, use, disclose, and protect personal information when you use our Services, interact with us, or visit our website or app. By accessing or using Tradel’s Services, you agree to this Privacy Policy.
2. Our commitment to privacy
We are committed to respecting your privacy and handling your personal information in accordance with the Australian Privacy Act 1988 (Cth), the Australian Privacy Principles (APPs), and other relevant data protection laws.
3. What information we collect
3.1. Personal information
Depending on how you interact with us, we may collect the following types of personal information:
(a) Identity Data: Name, date of birth, business name, business details (e.g. ABN), trade licence or other credentials, signature. If you use Google or Apple sign-in, we may also receive your name, email address, provider account identifier, identity token, authorisation code, and other profile information you choose to share through that provider. We do not receive your Google or Apple password.
(b) Contact Data: Email address, phone number, physical address, delivery site locations.
(c) Registration Data: Passwords, account logins, profile information, authentication details, and identifiers associated with your Tradel account. Passwords are stored in a protected form where we manage them.
(d) Transaction Data: Order history, payment card or bank details processed through Stripe, delivery arrangements, saved payment method references, invoices, refunds, and payment status. Tradel does not receive or store full payment card numbers processed by Stripe.
(e) Location and Mapping Data: GPS and device location data, with your permission, delivery addresses, map searches, route origin and destination coordinates, and location information used to show nearby suppliers, select an address, calculate a route, or manage a delivery. The customer app requests foreground location only, which means location is accessed while you are using the relevant feature or while the app is in use. If a driver or logistics user uses live delivery tracking, location may be collected and shared during the active delivery as described at the time that feature is used.
(f) Device and Usage Data: IP address, device identifiers, operating system type and version, app version and build, app settings and preferences, referring and exit URLs, times and dates of actions, features used, push notification token, installation identifier, error logs, performance data, and app crash logs. Sentry may process diagnostic data when the app reports an error or performance issue.
(g) Communications and Support Data: Messages with our team, chat, calls, emails, feedback forms, surveys, support requests, complaint records, and details you provide in a support form. This may include your name, contact details, message, order, merchant or product references, app version, device type, operating system, browser, screen details, and a support correlation identifier.
(h) Photos and Attachments: Photos or other files you choose to upload, including images attached to a support request, order issue, delivery record, or other feature. Photos may contain personal information or location details visible in the image or its metadata. You should only upload material that you are authorised to provide.
(i) Marketing and Preferences: Marketing opt-in choices, responses to campaigns or promotions, product interests, notification choices, and communication preferences.
(j) Other: Any other personal information voluntarily submitted by you while using Tradel.
3.2. Sensitive information
Generally, we do not collect sensitive information, such as health details. Photos, support messages, or other material you choose to submit may incidentally contain sensitive information. Please do not provide sensitive information unless it is necessary. If we need to collect sensitive information, we will ask for your consent where required and handle it in line with the law.
3.3. Third-party information
We may collect information about you from third parties you have authorised or that help us provide the Services. These may include business partners, delivery and logistics providers, suppliers, Stripe, Google, Apple, and other integration providers. We may also receive payment status, identity confirmation, delivery updates, route information, or other information needed to provide the Services.
If you provide personal information about another person, you must have authority to provide it and, where required, tell that person about this Privacy Policy.
3.4. De-identified or aggregated data
We may also collect and use de-identified or aggregated data, where individuals cannot reasonably be identified, for analytics, research, and business improvement.
4. How we collect personal information
We collect information in various ways, including:
(a) Directly from you: When you create an account, place an order, request a quote, enter delivery information, upload a photo, submit a support request, participate in surveys or promotions, or contact support.
(b) Automatically: Through cookies, app integrations, device permissions, push notification registration, error monitoring, and similar technologies when you interact with our app or website.
(c) From your device: When you allow access to foreground location, the photo library, camera, notifications, or another device feature. We request permission through your device where the operating system requires it. You can change device permissions in your device settings.
(d) From third parties: Where you have permitted our integration with services such as Stripe, suppliers, Google sign-in, Apple sign-in, Google Maps Platform, delivery providers, or where authorised by law.
(e) From publicly available sources: For verifying business details and qualifications, as required.
You may choose not to provide certain personal information, but this may affect our ability to provide the Services or a particular feature.
5. Why we collect, hold, use, and disclose personal information
We only collect, use, hold, and disclose your personal information for legitimate purposes, including:
- Providing our Services and fulfilling your transactions;
- Confirming your identity, signing you in, and verifying your account;
- Managing and tracking deliveries, despatches, returns, and payments;
- Connecting you with suppliers, drivers, and service partners;
- Processing payments, refunds, fraud checks, and saved payment methods through Stripe and relevant financial institutions;
- Providing customer support, reviewing uploaded photos and attachments, and responding to requests or complaints;
- Conducting research and analytics, diagnosing crashes and performance problems, and improving our platform and user experience;
- Customising content, recommendations, or advertising;
- Sending communications, including order confirmations, delivery updates, safety notifications, support responses, promotions, and events;
- Registering your device for push notifications and delivering notifications through Expo, Google Firebase Cloud Messaging, or Apple Push Notification service;
- Personalising communications based on your past interactions and stated preferences;
- Operating, troubleshooting, maintaining, and securing our IT systems, network, and digital infrastructure;
- Providing maps, place search, address selection, directions, route display, and delivery tracking;
- Meeting our legal, regulatory, tax, and compliance obligations, including fraud detection and prevention; and
- Other purposes disclosed to you at the point of information collection or permitted by law.
6. How we disclose personal information
We may disclose your personal information in the following ways:
- To our employees, contractors, or related entities as needed to operate our Services;
- To delivery drivers, supplier partners, and third-party logistics providers to arrange and track deliveries;
- To payment processors or financial institutions, including Stripe, to process payments, refunds, payment methods, and fraud checks;
- To technology service providers, including hosting, cloud services, error monitoring, analytics, customer relationship management tools, support systems, and communications platforms located in Australia or overseas;
- To integration partners or platforms when you link or use third-party services, including Google sign-in, Apple sign-in, Google Maps Platform, Apple Pay, or Google Pay;
- To push notification providers, including Expo, Google Firebase Cloud Messaging, and Apple Push Notification service, to register your device and send notifications;
- To mapping and routing providers, including OpenFreeMap, Google Maps Platform services such as Places and Routes, and OpenStreetMap-based routing services, to provide map tiles, address search, routing, and delivery tracking;
- To Sentry for error monitoring, crash reporting, and performance diagnostics;
- To marketing and advertising service providers, with opt-out options;
- To professional advisers, including accountants, auditors, legal advisers, and IT security providers, where necessary;
- To law enforcement, courts, regulatory or government authorities if required by law or court order, or to protect rights, property, or safety; and
- With your consent or as otherwise permitted under law.
6.1. Stripe payments
Stripe processes payment information on our behalf. Stripe may collect payment card details, billing and contact information, transaction information, device information, IP address, and information used for fraud prevention. Stripe handles that information under its own privacy policy. Tradel generally receives payment status, limited payment method details, such as card brand and last four digits, and Stripe customer, payment, or transaction identifiers.
Stripe Privacy Policy: https://stripe.com/au/privacy
6.2. Google and Apple sign-in
If you choose Google or Apple sign-in, the provider sends us the information needed to authenticate you and create or access your Tradel account. The information available to us depends on your provider settings and choices. Google and Apple also process information about your use of their sign-in service under their own privacy policies.
Google Privacy Policy: https://policies.google.com/privacy
Apple Privacy Policy: https://www.apple.com/au/legal/privacy/
6.3. Push notifications
We use Expo's notification service to help deliver push notifications through Google Firebase Cloud Messaging on Android and Apple Push Notification service on iOS. We may send a push token, installation identifier, device platform, and notification content to these providers. Notification content may appear on a locked device depending on your device settings. You can turn off push notifications in the app or your device settings. Turning them off may prevent you from receiving order or delivery alerts.
Expo Privacy Policy: https://expo.dev/privacy
Google Privacy Policy: https://policies.google.com/privacy
Apple Privacy Policy: https://www.apple.com/au/legal/privacy/
6.4. Sentry diagnostics
We use Sentry to identify crashes, errors, and performance problems. Diagnostic reports may include device and app information, IP address or network information processed by Sentry, timestamps, error details, technical events leading up to an error, and other contextual information needed to diagnose the problem. We configure the app not to intentionally send passwords, full payment card details, or full authentication tokens to Sentry. Diagnostic reports can still contain personal information if it appears in an error or technical context.
Sentry Privacy Policy: https://sentry.io/privacy/
6.5. Maps, places, and routes
We use OpenFreeMap to display map tiles and Google Maps Platform services, including Places and Routes, for address search and route information. We may also use OpenStreetMap-based routing services as a fallback. These providers may receive an IP address, device or request information, search terms, addresses, and route origin and destination coordinates. Some requests may pass through Tradel's servers before reaching the provider. Each provider handles information under its own privacy terms.
Google Privacy Policy: https://policies.google.com/privacy
OpenFreeMap Privacy Policy: https://openfreemap.org/privacy/
6.6. Support data and photo uploads
When you contact support or upload a photo, we disclose the submitted information only to Tradel personnel and service providers who need it to review, store, secure, or respond to the request, or where another disclosure is permitted by this policy or law. Do not include passwords, full payment card details, or unrelated personal information in support messages or photos.
Except as set out above, we will not sell or rent your personal information or share it with third parties for their independent marketing purposes.
7. Overseas transfers and cloud services
Some of our supporting technology and platform providers, and their subprocessors, are located outside Australia. Depending on the service and provider configuration, countries where personal information may be stored, accessed, or processed include the United States, Ireland, Germany, Hungary, Singapore, and other countries in the European Union or European Economic Area. Provider locations may change as providers update their infrastructure and subprocessors.
Overseas providers may include Stripe, Sentry, Google, Apple, Expo, OpenFreeMap, cloud hosting providers, communications providers, and their subprocessors. Overseas recipients may be subject to privacy laws that differ from Australian law.
When we disclose personal information overseas, we take reasonable steps required by the Privacy Act to make sure the recipient handles it in a way that is consistent with the APPs. This may include reviewing provider security and privacy practices and using contractual safeguards. If we intend to rely on your informed consent to an overseas disclosure exception under the Privacy Act, we will tell you the relevant circumstances and consequences and ask for that consent before the disclosure.
8. Direct marketing
We may send you information about new features, promotions, events, or products using your preferred contact details, including email, SMS, push notification, or phone, where permitted by law. You can opt out or change preferences at any time through your app profile, the unsubscribe instructions in the message, your device settings, or by contacting us. We will still send service messages needed to manage your account, orders, security, or deliveries.
9. Cookies, tracking, and analytics
We use cookies and similar technologies, including app diagnostics and advertising pixels, to:
- Operate and secure our website and app;
- Recognise you and remember preferences;
- Analyse user journeys and improve our Services;
- Diagnose errors and app performance problems; and
- Measure campaigns and retarget ads where permitted.
Our current Firebase use supports Android push notification delivery through Firebase Cloud Messaging. This policy does not state that Tradel uses Firebase Analytics or Firebase Crashlytics unless we introduce and disclose those services.
If you do not wish for your data to be collected through cookies or optional app tracking, you may adjust your browser, app, or device settings. Some functions may not work as intended if cookies, permissions, or tracking are disabled. Device permissions and any required tracking choices will also be presented through the app where applicable.
10. Links to third-party sites and services
Our platform may contain links to external websites, apps, payment services, or plug-ins. We are not responsible for the privacy practices of third parties. We recommend that you review their privacy policies before sharing personal information.
11. Security and retention
We take reasonable precautions to protect your information from misuse, interference, loss, unauthorised access, modification, or disclosure. Our measures may include:
- Applying encryption in transit and, where appropriate, at rest;
- Limiting access based on user roles and business need;
- Updating security practices, testing systems, and monitoring infrastructure;
- Using multi-factor authentication on key administrative services where available; and
- Requiring service providers and vendors to maintain confidentiality and appropriate security controls.
No system is completely secure. If an eligible data breach is likely to result in serious harm, we will notify affected individuals and the Office of the Australian Information Commissioner as required by law.
We retain personal information only for as long as we need it for the purpose for which we collected it, or to meet legal, accounting, tax, fraud prevention, dispute, and enforcement obligations. Our retention approach includes:
(a) Account and Profile Data: Kept while your account is active and for the time reasonably needed to process closure, handle disputes, prevent fraud, and meet legal obligations after deletion;
(b) Transaction, Payment, Invoice, and Order Data: Kept for the period required by applicable tax, financial recordkeeping, consumer, and corporate laws, and while needed to handle refunds, chargebacks, warranties, or disputes;
(c) Support Data and Uploaded Photos: Kept while we handle the request and for a reasonable period afterwards for service history, complaint handling, security, and dispute purposes;
(d) Location and Route Data: Kept only for as long as needed to provide and record the relevant location, route, order, or delivery function, and for related safety, fraud, support, or dispute purposes;
(e) Diagnostic and Security Data: Kept according to our configured log and Sentry retention periods and for as long as needed to investigate errors, security events, abuse, or fraud;
(f) Push Notification Data: Kept while a token or installation remains registered for notifications and removed or invalidated when it is no longer needed or when the provider reports that it is invalid; and
(g) Backups: Personal information may remain in protected backups until those backups are overwritten or expire through the normal backup cycle. We restrict access to backup data and do not use it for ordinary business purposes.
When we no longer need personal information and the law does not require us to keep it, we take reasonable steps to delete it or de-identify it.
12. Access, correction, and rights
You have the right to access or correct your personal information. You may do this by logging into your Tradel account or by contacting us with a written request.
(a) Access: We will provide copies of personal information we hold about you unless we have a legal reason to refuse. We may ask you to verify your identity first. If we refuse access, we will explain the reason and available complaint options where required by law.
(b) Correction: We will take reasonable steps to correct information found to be inaccurate, incomplete, irrelevant, misleading, or out of date. If we refuse a correction request, we will explain the reason and available complaint options where required by law.
(c) Account Deletion and Destruction: You may request deletion of your Tradel account and associated personal information through the account deletion option in the app or by contacting info@tradel.com.au. We may ask you to verify your identity and complete any required security step before processing the request. Once the request is confirmed, we will close the account and delete or de-identify personal information that we no longer need.
Deletion may not be immediate or complete where we must retain information to meet legal, tax, accounting, fraud prevention, safety, dispute, chargeback, or enforcement obligations. We may also retain limited records needed to document and comply with the deletion request. Data in protected backups will be removed through the normal backup cycle. We will not use retained information for unrelated purposes.
Deleting your Tradel account does not delete information independently held by Stripe, Google, Apple, a supplier, delivery provider, or another third party under its own legal obligations and privacy policy. It also does not delete your Google or Apple account. You may need to contact the relevant provider or use its privacy controls for that information.
(d) Anonymity and Use of Pseudonyms: In some cases, you may interact with us anonymously or under a pseudonym, but this may prevent us from handling orders or providing the full Services.
For more information, contact us using the details below.
13. Making a privacy complaint or enquiry
If you have a question, concern, or complaint about how we handle your privacy:
(a) Contact Us: Contact our Privacy Officer at info@tradel.com.au.
(b) Our Response: We will investigate and respond to your complaint promptly, usually within 30 days.
(c) Further Action: If you are dissatisfied with our response, you may contact the Office of the Australian Information Commissioner at https://www.oaic.gov.au/.
14. Changes to this policy
We may update this Privacy Policy by publishing a revised version on our website or app. We recommend that you review it regularly. We will communicate significant substantive changes to registered users.