Privacy Policy

This Privacy Policy explains how Leadhand Pty Ltd (ABN 37 699 652 072) (Leadhand, we, us or our) handles personal information. We are based in Queensland, Australia and we are bound by the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

Leadhand is job-management software for Australian trade businesses. In this policy, a customer is a business that subscribes to Leadhand, and a clientis one of that business's own customers whose details the business records in Leadhand. We act as the custodian of the information our customers put into the platform, and the customer remains responsible for what they collect and how they use it.

What this policy covers

This policy covers personal information we handle as a business: account holders, people who contact us, and visitors to our website. The way we handle the data a customer stores about their own clients is governed by our agreement with that customer (see our Terms of Service) and by the section on customer data below.

The kinds of information we collect

We collect personal information, which may include:

• Account information - your name, business name, email address, phone number, role and login credentials.
• Billing information - your billing contact and subscription details. Card payments are processed by Stripe; we do not store full card numbers on our systems.
• Customer data you enter - the records you create in Leadhand, including details of your clients (names, addresses, contact details), jobs, quotes, invoices, photos, forms and notes.
• Usage and device information - log data, IP address, browser and device type, and how you use the app, which we use to run, secure and improve the service.
• Support and enquiry information - what you tell us when you email us, request a demo or ask for help.

We do not ask you to upload sensitive information (such as health or safety records) unless it is necessary for your lawful use of the service. If you do, you are responsible for having any required consent or lawful basis, and we handle it as part of your customer data under this policy.

How we collect information

We collect most information directly from you - when you sign up, set up your account, use the app, or contact us. We also collect some information automatically through cookies and similar technology when you use our website and app. Where it is reasonable and practicable, we collect personal information directly from the individual it is about.

Where a customer enters information about their clients, we collect that information on the customer's behalf. The customer is responsible for having the right to provide it to us and for telling their clients how their information is handled.

Why we collect, hold and use information

We collect, hold and use personal information to:

• create and manage your account and provide the Leadhand service;
• process subscriptions, payments and invoices;
• provide support and respond to your enquiries;
• keep the service secure, prevent misuse, and meet our legal obligations;
• improve and develop features and understand how the product is used; and
• send you service-related messages and, where you have not opted out, occasional product updates.

If we cannot collect the information we reasonably need, we may not be able to provide the service or respond to your request.

How we hold and protect information

We hold personal information in our cloud infrastructure and take reasonable steps to protect it from misuse, interference, loss, and unauthorised access, modification or disclosure. These steps include encryption in transit and at rest, access controls, and limiting access to the people who need it. Our security practices are described further on our Security page.

No method of transmission or storage is completely secure, so we cannot guarantee absolute security. If we become aware of a data breach that is likely to cause serious harm, we will act in line with the Notifiable Data Breaches scheme under the Privacy Act.

Disclosure to others

We do not sell personal information. We disclose personal information to the service providers who help us run Leadhand, and only so they can provide their service to us. Our main providers are listed on our Security page and include Supabase (database and file storage), Stripe (payments), Resend (email delivery) and Vercel (application hosting).

We may also disclose personal information:

• where you ask us to or have given consent;
• where required or authorised by law, or to a court, regulator or law enforcement body; and
• to a purchaser or successor if we sell or restructure all or part of our business, subject to this policy.

Where we store data, and overseas disclosure (APP 8)

Your account data and the information you store about your clients are held in our database, which is hosted in Australia (Sydney). We have deliberately kept your core business data onshore.

Some of the other service providers we use to run Leadhand process limited data outside Australia. In particular, our payments provider (Stripe), our email-delivery provider (Resend) and our website host and content-delivery network (Vercel) operate from or route data through the United States. This means some personal information may be disclosed to and held by recipients located in the United States. Stripe may process billing and payment details. Resend may process email addresses, message metadata, and the content of the transactional emails we send (such as quotes and invoices). Vercel may process request metadata, IP addresses, application logs, and limited application data needed to host and deliver the service.

Before disclosing personal information to an overseas recipient, we take reasonable steps to ensure the recipient handles it consistently with the Australian Privacy Principles, including through our contracts with them. We use contracts that require these providers to handle personal information consistently with the Australian Privacy Principles or equivalent protections, and we can provide a data-processing summary on request. If we add a material new overseas provider, we will give reasonable notice. You can read more about where we host data, and which providers we use, on our Security page.

Cookies and analytics

We use cookies and similar technologies to keep you signed in, remember your settings, understand how the app and website are used, attribute sign-ups to marketing campaigns, and measure advertising performance. This can include campaign parameters and pseudonymous advertising click identifiers supplied by Google or Meta. You can set your browser to refuse cookies, but some parts of the service may not work properly if you do.

Direct marketing

We may send you product updates and offers about Leadhand. Every marketing email includes an unsubscribe link, and you can opt out at any time by using that link or emailing us at hello@leadhand.com.au. We will still send you service messages you need to run your account, such as billing notices and security alerts.

Access and correction

You can access and correct most of your information directly in the app. You can also ask us for a copy of the personal information we hold about you, or ask us to correct it, by emailing hello@leadhand.com.au. We will respond within a reasonable time. If we refuse access or correction, we will tell you why and how you can complain. We do not charge for making a request, though we may charge a reasonable cost for giving access in some cases.

If you are a client of a Leadhand customer (a business that uses Leadhand), you can contact that business directly, or contact us and we will take reasonable steps to help verify and handle your request, including by working with the relevant business where appropriate.

How long we keep information

We keep personal information for as long as you have an account and for as long afterwards as we need it to meet legal, tax and record-keeping obligations or to resolve disputes. When information is no longer needed, we take reasonable steps to delete it or de-identify it. Customers can export and delete their data as described in our Terms of Service. You can request deletion of your account and personal information at any time - see our Account and Data Deletion page for how to ask and what we keep.

Complaints

If you have a concern or complaint about how we have handled your personal information, email us at hello@leadhand.com.au and we will investigate and respond. If you are not satisfied with our response, you can contact the Office of the Australian Information Commissioner (OAIC) at www.oaic.gov.au or on 1300 363 992.

Changes to this policy

We may update this policy from time to time. When we make a material change, we will update the date at the top of this page and, where appropriate, let you know in the app or by email. The version published on our website is the current one.

Contact us

For any privacy question or request, contact our Privacy Officer at hello@leadhand.com.au.

You can browse our public website without identifying yourself. Creating an account requires identifying and billing details.

Leadhand Pty Ltd
ABN 37 699 652 072
Queensland, Australia