Privacy Policy

When you fill in a form. Your name or business name, your trade and suburb, the package you are interested in, your mobile number, your email address if you give one, links you paste, and anything you type into a message field. With an enquiry we also record the wording of the consent line you agreed to and when, and which ad or link brought you to the page.

When you buy something. Your name, email and billing details. Payment is processed by Stripe. We never see or store your card number.

When you order a package. The details you give us to build your site: your business name, ABN, contact details, hours, the areas and services you cover, your website and Google listing details, trust details such as your licence and insurer, reviews you paste in, and any photos or logo you upload. While you pay, the form is held encrypted; if you don't pay, it is deleted, usually within the hour and always within a day, and all we're told is your name, business, mobile and package, so we can call you about it. Once you've paid, we keep it, encrypted, with whether the order is paid or refunded. We never ask for a password.

If you ask us to stop texting. Reply STOP to any text and we add your number to our opt-out list, which every text is checked against. The list holds a scrambled (hashed) form of the number, not the number itself.

When you check your spot on Google. The business name, what you do and the suburb you type, plus your IP address, which we use to limit how many checks can be run (it is kept scrambled, for an hour). We look up public information about the business on Google: its Google Maps listing and where it comes up in a search for what you do in that suburb. Google also writes the short summary you see. We may call the business about the result.

When you visit. Standard web request information: IP address, browser type, the pages you view, and the site you arrived from.

When you use one of our tools. If you are a customer of one of our software products, information you enter into it, and message logs where the product sends or receives messages on your behalf.

The Meta pixel and the Meta Conversions API. These run on our advertising landing page at torek.trade/area and the pages that follow it (the thank-you, application, payment and confirmation pages), and on the confirmation pages of older purchases. The pixel sends Meta the page you viewed, your IP address and browser details, and whether you sent an enquiry or an application, opened the payment form or paid. When you send an enquiry or an application, or open the payment form, our server also sends Meta the same event, with your email address and mobile number scrambled (hashed) first if you gave them, your IP address and browser details, and Meta's own cookie identifiers, so the event is counted once.

We use it to measure whether our advertising works. Meta may also use it for their own purposes under their own terms. Meta’s data policy is at facebook.com/privacy/policy.

We use Microsoft Clarity to see how people use our website, such as where they click and how far they scroll, so we can improve it. Clarity uses cookies and similar technology to do this. Anything you type into our forms is hidden from it. Microsoft handles this data under its privacy statement: https://privacy.microsoft.com/privacystatement

You can limit this. Browser ad and tracking blockers stop the pixel, and Meta offers ad preference controls in your account settings. Blocking it does not affect your ability to buy from us or use anything on the site.

• Stripe: payments: your name, email, mobile, business details and the package you ordered, plus your card, which Stripe holds and we never see
• Meta: advertising measurement, through the pixel and the Conversions API (page views, enquiries, orders and payments from the /area pages, with email and mobile hashed)
• Microsoft Clarity: recordings of how visitors use the /area pages, with form input masked
• Google: advertising measurement, where a Google campaign is running; and, when you check your spot, the business name, what you do and the suburb you type, to find the business on Google Maps, see where it comes up and write the summary of your result
• Resend: sending email: the details of your enquiry or order to us, and your receipt to you
• Mobile Message: texting you about your enquiry or order from our own mobile number: your mobile number and the message
• ClickSend: sending and receiving SMS, for customers of our messaging products
• Twilio: sending and receiving SMS, for customers of our messaging products
• Vercel and Cloudflare: hosting and content delivery; Vercel also stores your application (encrypted), the photos and logo you upload with it, and the SMS opt-out list
• Upstash: counting spot checks so they stay within their limits, with your IP address scrambled (hashed) and deleted after an hour
• Anthropic: text and image processing inside some of our products

Some of these are outside Australia, which means your information may be stored or processed overseas.

To answer your enquiry, deliver what you have paid for, run the products you use, take payment, measure our advertising, and meet our legal and record keeping obligations.

We do not sell your information.

Enquiries and customer records for as long as we are working together and afterwards for as long as we are required to keep business records. Ad measurement data is held by the platforms under their own retention rules, not ours.

Email torek.trade@gmail.com and ask. We will tell you what we hold, correct anything wrong, or delete it where we are not required to keep it.

Email us first. If you are not satisfied you can contact the Office of the Australian Information Commissioner at oaic.gov.au.

We may update this policy. The current version is always the one on this page.

torek.trade@gmail.com