Privacy Policy — Directory.com.au

This Privacy Policy explains how WWW.DIRECTORY.COM.AU PTY LTD (ABN 68 090 816 461) ("we", "us"), operator of Directory.com.au, collects, uses, stores and discloses personal information. We comply with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

1. What we collect

Account holders: name, email address, phone number and password (stored as a one-way hash). Business listings: the business details you submit for publication — these are intended to be public. Enquiries and claims: the name, contact details and message you send through our forms, plus the submitting IP address for spam prevention. Payments: payment amount, reference and receipt details. Card numbers are collected and processed by Stripe — they never touch our servers.

2. How we use it

To operate the directory: publishing listings, running the review/approval process, and delivering enquiries to listed businesses.
To process payments and issue receipts.
To respond to support requests and notify you about your listing (approvals, rejections, renewals).
To prevent spam and abuse (rate limiting, honeypots, IP logging).

We do not sell personal information, and we do not send marketing email without consent.

3. Public information

Business listings are public by design: the business name, address, description, website, category and — for Verified listings — phone number appear on the site, in search engines and in structured data consumed by AI assistants. Personal contact details of account holders are never published.

4. Disclosure

We disclose information only to: payment processors (Stripe) to complete transactions; the listed business, when you send it an enquiry through our forms; and government agencies where required by law. Our services are hosted in Australia where practicable.

5. Security

Passwords are hashed, access to administrative systems is restricted, forms are protected against cross-site request forgery, and all payment card handling is delegated to a PCI-DSS compliant processor.

6. Access, correction and deletion

You can update your account and listings at any time from My Account. To access, correct or delete other personal information we hold, contact us via the contact form or write to us at 1 Katherine St, Chatswood NSW 2067, Australia. We respond within 30 days.

7. Cookies

We use a single session cookie, strictly necessary to keep you logged in. We do not run third-party advertising or tracking cookies.

8. Complaints

If you believe we have mishandled your information, contact us first — we take complaints seriously. You may also complain to the Office of the Australian Information Commissioner (oaic.gov.au).