Privacy Policy

Contractable Pty Ltd
ACN 678 227 695 · ABN 55 678 227 695
53/104 Bathurst Street, Sydney NSW 2000, Australia

About this policy

This policy explains how we collect, hold, use and disclose personal information through contractable.co, our enquiries and services, and the Contractable platform. Contractable Pty Ltd operates the service and handles customer information. Privacy questions can be sent to hello@contractable.co.

What we collect

When you contact us, request a guide or demo, or enquire about a project or partnership, we collect the details you provide: your name, business, email, optional mobile number, interests and enquiry. We also keep relevant correspondence, booking details and records of consent.

For customer accounts, we hold authorised users’ names, business contact details, permissions, account activity and billing records. Project records may include workers’ names, approved hours and labour rates, supplier and subcontractor contacts, orders, invoices and claim correspondence.

Website and security services may receive technical information such as IP address, browser/device details, request times and errors. Optional analytics and advertising measurement are described below. Please do not send identity documents, tax file numbers or sensitive personal information through a website enquiry.

How and why we collect it

We collect information directly from you, from the business that administers your platform account, and from service providers supporting the requested service. We use it to respond to enquiries, provide requested resources, assess and configure projects, arrange demonstrations, deliver and support the platform, administer accounts, maintain security and meet legal obligations.

You can leave mobile blank on lead forms. Some details, such as an email address, are needed to respond or provide the requested service. If essential information is missing, we may be unable to complete that request.

Information in a customer’s account

The customer business decides which project and personnel records it puts into its account. It is responsible for having authority to provide them and for informing the people concerned. We handle those records to provide the agreed service, support and security. Contact that business first for changes to its records; we assist it with authorised requests. You can also contact us about our own handling of your information.

We do not sell customer information. Any use of de-identified statistics must not identify an individual or disclose a customer’s confidential records.

Who receives information

Access is limited to personnel, contractors and providers who need it for the relevant purpose. Providers can include hosting and backup services, HubSpot for forms and CRM, Microsoft for email and meeting services, payment services where used, and professional advisers. Authorised accounting or other integrations receive the data needed for the connection the customer chooses.

If you contact us through Facebook, Instagram or WhatsApp, Meta also handles that interaction under its own terms. If you request help from an AI or implementation consultant, we agree the named introduction and information to be shared with you first. A guide download does not authorise a consultant handover.

For an AI workflow, the agreed scope identifies the records, access and providers involved. Do not upload live project or personnel files to a third-party AI service unless your business has authorised that use and checked its data settings. Website enquiry forms do not require those files.

We may disclose information where required or authorised by law, to resolve a dispute, or in a business transfer with appropriate protections.

Hosting and overseas processing

Our platform is hosted in Australia. Some business, website and communications providers process information overseas. This can include the United States and other locations used by Google, Meta, HubSpot and Microsoft. Australian platform hosting does not mean that every provider processes all information in Australia.

Provider locations and arrangements can change. See the HubSpot sub-processors list, Google Privacy Policy, Meta Privacy Policy and Microsoft Privacy Statement. Contact us for details relevant to your service. We take reasonable steps required by applicable privacy law when disclosing information overseas.

Cookies and measurement

Essential services support page delivery, security, forms and your cookie choices. Embedded HubSpot forms and Google reCAPTCHA receive technical information needed to display and protect a requested form. Rejecting optional measurement does not prevent you from making an enquiry; email is also available.

With analytics permission, Google Analytics helps us understand website use and accepted enquiries. With advertising permission, the Meta Pixel helps us measure advertising responses. These services can receive browser/device details, IP address, page context, identifiers and an event such as a completed enquiry. They may recognise a browser across visits.

Optional analytics and advertising start off. Use Cookie settings to accept, reject or choose them separately, and to withdraw permission. We remember acceptance and rejection for 180 days in this browser, unless you clear its saved data. Withdrawal stops future optional measurement on this site; it does not recall information already sent or erase third-party records.

We configure enquiry measurement to send form identity and enquiry type, rather than the name, email, mobile number or message entered into the form. Cookie permission is separate from email marketing permission.

Marketing

Requesting a guide, making an enquiry or giving a mobile number does not by itself subscribe you to general marketing. We send marketing where you have consented or another lawful basis permits it. Marketing messages identify Contractable and provide an unsubscribe option. You can also opt out by emailing hello@contractable.co. We continue to send communications needed to answer your request or administer an existing service.

Retention and deletion

For enquiries that do not proceed, we delete the information provided no later than twelve months after our last contact, unless law requires retention.

When an authorised account representative confirms closure, we delete the project information collected for that account, including its break-up, rates and uploads. Free-project information is not retained as a commercial record after closure. Routine backup copies expire within 30 days.

For paid accounts, project information is deleted on closure, while account and financial transaction records—such as invoices, payments and account dates—are kept where required for legal, tax, accounting or dispute purposes. We do not promise to erase another business’s transaction records.

Security

We take reasonable steps to protect information through access controls, permissions and the security measures of our service providers. No system is completely secure. Keep your credentials private and contact us promptly if you suspect unauthorised access. We assess suspected data breaches and notify affected parties and regulators where required by law.

Access, correction and complaints

Ask our Privacy Officer at hello@contractable.co to access or correct information we hold, request deletion, or make a privacy complaint. We may need to verify your identity and authority. We respond within a reasonable period, explain any lawful refusal, and discuss the next step with you.

If you are not satisfied with our response, you can contact the Office of the Australian Information Commissioner. Your applicable legal rights are not limited by this policy.

Updates and contact

We publish policy updates at contractable.co/privacy-policy/. New uses requiring consent will be handled separately. Contact: Privacy Officer, Contractable Pty Ltd, 53/104 Bathurst Street, Sydney NSW 2000, Australia; hello@contractable.co.