Privacy Policy
Last updated: 28 September 2026
1. About This Policy
This policy explains how Made 4 Tradies ("we", "us", "our") collects, holds, uses and discloses personal information, and how you can access it, correct it or complain. It follows the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). Made 4 Tradies is the trading name of R J Kelsey (ABN 33 189 153 652), a sole trader business based in Australia. This policy covers visitors to this website, people who contact us or use our services, and trade businesses we contact about our services.
2. Information We Collect
The personal information we collect depends on how you deal with us. Information you give us: • Your name, email address and phone number • Details of your business, such as its name, trade, service area, website and Google Business Profile • What you tell us in enquiries, audit requests, bookings, briefs and other messages, and any files you send us • Details of other people you give us, for example when you refer someone to us or nominate someone in a competition • Testimonials and reviews you give us • Your marketing preferences • Payment details. Payments are processed by Stripe, and we never see or store your full card number. Information we collect automatically when you use our website, such as your IP address, details of your browser and device, the pages you visit, and how you arrived, including advertising and campaign identifiers. Section 6 explains the tools that collect it. Information from other sources: • Publicly available business information, such as Google Business Profiles, business websites, online reviews and business directories. This can include a business owner's name and the business's contact details. We use it to find trade businesses that may benefit from our services and to contact them about those services. • People who refer you to us or nominate you in a competition. • Our advertising and analytics providers, which report to us on how our ads and website perform. If we collect your details from someone other than you, such as a person who referred you, we will let you know when we first contact you. You can always ask us where we got your details. Giving us personal information is voluntary, and you can browse our website without telling us who you are. If you do not give us your contact details, we may not be able to respond to your enquiry or provide our services. We do not ask for sensitive information, such as information about your health, racial or ethnic origin, religious or political beliefs, or criminal record. Please do not include it in messages to us. Our services are for businesses and are not intended for children. We do not knowingly collect personal information from anyone under 18.
3. How We Use Your Information
We collect, hold and use personal information to: • Respond to your enquiries, prepare quotes and audits, and book calls • Provide, manage and bill for the services you buy from us • Send you service messages, such as booking confirmations, receipts and updates about your project • Send you marketing about our services, as described below • Find trade businesses that may benefit from our services, using publicly available business information, and contact them about those services • Run our referral program and our competitions • Publish testimonials and reviews you give us, with your name, business name and location (you can ask us to remove one at any time) • Measure and improve our website and our advertising, including showing our ads to people who have visited our website (see section 6) • Keep our website and systems secure, and prevent spam and fraud • Meet our legal obligations and resolve disputes Marketing: we send marketing emails and messages only where the law allows, for example when you have asked for them, when we already have a business relationship with you, or when a business has published its contact details and our message relates to that business. Every marketing email includes an unsubscribe link, and you can also ask us to stop at any time using the details in section 12. We will act on your request promptly. We do not sell or rent your personal information.
4. Who We Share It With
We share personal information with service providers that help us run our business. They handle it on our behalf, for the purposes in this policy: • HubSpot, our customer records and email marketing system • Resend, which delivers our emails • Stripe, which processes payments • Google, for business email, documents, calendar bookings and video calls • Vercel, which hosts this website, and Upstash, which stores some of its data • Cloudflare, which checks that some of our forms are not being filled in by bots • PostHog, for website analytics (see section 6) • Telegram, which we use to alert our team to new enquiries • AI service providers (see below) • People who work with us to deliver our services We use AI service providers (companies that supply AI tools such as chat assistants and writing tools) to help us run our business, for example to draft replies to enquiries, summarise emails and plan our marketing. When we use these tools, the information needed for that task may be sent to the provider, which processes it on our behalf. Some of these providers are based overseas, including in the United States, so your information may be processed outside Australia (Australian Privacy Principle 8). We also share information with advertising platforms: Meta, Google and Reddit. Section 6 explains what each one receives. They use it for their own purposes as well as ours, under their own privacy policies. We may also disclose personal information to our professional advisers, such as accountants and lawyers, to anyone we are required or authorised by law to disclose it to, and to a buyer of our business if we sell it. Otherwise, we disclose personal information only with your consent or where the law requires or permits it.
5. Information Sent Overseas
Some of the organisations in section 4 store or process personal information outside Australia. Most of them are based in, or use data centres in, the United States, and some also use data centres in other countries. Before we disclose personal information to an overseas recipient, we take reasonable steps to ensure it handles the information in line with the Australian Privacy Principles, as Australian Privacy Principle 8 requires, for example by using providers bound by privacy and security terms. Meta, Google and Reddit use the information they receive for their own purposes, under their own privacy policies, and may store it in the United States and other countries.
6. Analytics, Cookies and Advertising
We use the following analytics and advertising services on this website. Google Analytics 4 (GA4) measures how visitors find and use our website. It sets first-party cookies on this domain (_ga, and a cookie whose name starts with _ga_) that hold a random identifier, so it can recognise repeat visits. They last up to 2 years. Google receives information about your visit, such as the pages you view, how you arrived, your approximate location, and your browser and device. We keep GA4 data for 14 months. We use Google Analytics Advertising Features: Remarketing with Google Analytics, and Demographics and Interests reporting. This means we and Google use first-party cookies (such as the Google Analytics cookies) and third-party cookies (such as Google advertising cookies) together to show our ads to people who have visited our website when they later use other websites and apps, to measure how those ads perform, and to report on visitors' age range, gender and interests. Those reports are aggregated and do not identify you to us. If you are signed in to a Google account and have allowed ads personalisation, Google may link this information to your account. You can turn off personalised Google ads in My Ad Center at myadcenter.google.com, and opt out of Google Analytics entirely with the Google Analytics Opt-out Browser Add-on at tools.google.com/dlpage/gaoptout. Vercel Analytics and Speed Insights measure page views and how quickly our pages load. They do not use cookies or persistent identifiers. You can read more at vercel.com/legal/privacy-policy. PostHog, a product analytics service, helps us understand how visitors use this website. It records the pages you view and when you leave them, the links and buttons you click (including the text on them), when you submit a form (but not what you typed into it), how you found our site, and errors that occur on the page. It also makes session recordings, which replay how you scrolled, moved and clicked on a page, and heatmaps that show where visitors click and scroll. Session recordings capture what is shown on the page, but what you type into form fields (such as your name, email address or phone number) is masked (hidden) in your browser before the recording is sent. Recordings also include technical messages the website writes in your browser (such as error messages) and a list of the files and requests each page loads, with their addresses and timings but not their contents. Session recordings are kept for 30 days. PostHog stores random identifiers in a first-party cookie (its name starts with ph_ and ends with _posthog) and in your browser's local storage so it can recognise repeat visits. The cookie expires after one year. PostHog also receives your IP address and details of your browser and device, and may use your IP address to estimate your approximate location. This data is sent through our own domain, but PostHog processes and stores it on servers in the United States, so it is processed outside Australia (Australian Privacy Principle 8). You can delete the cookie and clear local storage in your browser settings at any time. HubSpot's tracking code sets first-party cookies on this domain (such as hubspotutk and __hstc) and records the pages you visit. If you then fill in one of our forms, HubSpot links those visits to your record in our customer system, so we can see which pages you viewed. HubSpot's tracking code can also load the advertising tags of ad accounts we connect to HubSpot. HubSpot may store this data outside Australia (Australian Privacy Principle 8). We use Meta (Facebook and Instagram) advertising tools, including the Meta Pixel and the Meta Conversions API. Our website sets two Meta advertising cookies: _fbp, a random identifier for your browser, and _fbc, which records your click if you arrived from a Meta ad. Both last up to 90 days. The Meta Pixel runs in your browser and sends Meta information about your visit and the actions you take, such as pages viewed and form entries. When you submit a form, book a call, sign up or make a payment, our server sends Meta details of that action through the Conversions API. Where we have them, your first name, last name, email address, phone number, city and country are hashed before they are sent. Hashing turns each one into a code that Meta cannot read but can match against details it already holds, such as those in a Facebook or Instagram account, so hashed details can still identify you to Meta. Your IP address, details of your browser and device, the identifiers in the _fbp and _fbc cookies, and the address of the page you were on are sent without hashing. This lets Meta attribute conversions to our ads, measure their performance, show our ads to people who have visited our website (remarketing), and find people similar to our customers. Meta Platforms processes this data and may store it outside Australia (Australian Privacy Principle 8). You can control or limit this through your Facebook and Instagram ad preferences and through your browser or device settings. We use the Reddit Conversions API, a Reddit advertising tool that runs on our server rather than in your browser. When you send us an enquiry, audit request, application or competition entry through a form on this website, our server sends Reddit a record of that action and when it happened, whether or not you came from a Reddit ad. It does not do this when you only sign up for our newsletter, join a waitlist, download a free guide or nominate someone. Where we have them, your email address and phone number are hashed before they are sent. Hashing turns each one into a code that Reddit cannot read but can match against details it already holds, such as those in a Reddit account, so hashed details can still identify you to Reddit. Your IP address, details of your browser and device, the address of the page you were on and, if you arrived from a Reddit ad, the Reddit click identifier (rdt_cid, described below) are sent without hashing, along with a random reference number for the event. Under Reddit's advertising terms, Reddit may use this data to measure how our ads perform, to improve its advertising services, to build audiences of people who have visited our website so it can show them our ads (remarketing), and to find Reddit users with similar characteristics (lookalike audiences). Reddit, Inc. processes and stores this data on servers in the United States and may pass it to its affiliates and service providers in other countries, so it is processed outside Australia (Australian Privacy Principle 8). If you have a Reddit account, you can stop Reddit using information from advertisers such as us to personalise the ads you see, in the Privacy section of your Reddit account settings. Our website also records how you reached it, so we can see which ads and campaigns bring us enquiries. If you arrive by clicking an ad, the ad platform adds a click identifier to the link, and our website stores it in a first-party cookie: gclid for Google ads (kept for 90 days), and rdt_cid for Reddit ads and ttclid for TikTok ads (each kept for 30 days). If you then send us an enquiry, the rdt_cid identifier is sent to Reddit as described above. We do not currently read the gclid or ttclid cookies or send them to anyone. If the link you followed carried campaign tags (such as utm_source or utm_campaign), our website stores those tags, the page you landed on and the time you arrived in a first-party cookie called m4t_attribution, kept for 90 days. Our website also keeps a similar note in your browser's local storage: the campaign tags, whether you arrived from a Google or Meta ad, and the website that referred you. When you send us an enquiry through a form or book a call, we may add where you came from, such as the ad platform and campaign name, to your record in our customer database (HubSpot) and to our internal notification of your enquiry. We also add it to the analytics described above (Google Analytics 4 and PostHog). You can delete these cookies and clear local storage in your browser settings at any time. Your choices: you can block or delete cookies and clear local storage in your browser settings, although some parts of our website may not work as well without them. You can limit personalised advertising through My Ad Center (myadcenter.google.com), your Facebook and Instagram ad preferences, your Reddit privacy settings, and your device's advertising settings.
7. Security and Retention
We take reasonable steps to protect personal information from misuse, interference and loss, and from unauthorised access, change or disclosure. Our website uses encrypted connections (HTTPS), we use established service providers with their own security controls, and we limit access to the people who need it. We keep personal information only for as long as we need it for the purposes in this policy, or for as long as the law requires, for example for tax and accounting records. When we no longer need it, we delete it or remove the details that identify you. Google Analytics data is kept for 14 months. If a data breach is likely to cause you serious harm, we will tell you and the Office of the Australian Information Commissioner (OAIC), as the law requires.
8. Access and Correction
You can ask for access to the personal information we hold about you, and ask us to correct it if it is inaccurate, out of date, incomplete, irrelevant or misleading (Australian Privacy Principles 12 and 13). Contact our Privacy Officer using the details in section 12. We may need to confirm your identity first. We will respond within 30 days. We do not charge for making a request, and giving you access is usually free. If a charge applies, we will tell you before we act, and it will not be excessive. If we refuse a request, we will tell you why in writing and how to complain. If we do not agree to correct your information, you can ask us to attach a statement that you believe it is inaccurate, out of date, incomplete, irrelevant or misleading, and we will take reasonable steps to do so.
9. Complaints
If you think we have breached the Australian Privacy Principles or mishandled your personal information, please contact our Privacy Officer using the details in section 12 and tell us what happened. We will acknowledge your complaint, look into it, and respond in writing within 30 days. If you are not satisfied with our response, you can complain to the Office of the Australian Information Commissioner (OAIC) at www.oaic.gov.au.
10. Links to Other Websites
Our website may contain links to third-party websites. We are not responsible for the privacy practices of those sites. We encourage you to review the privacy policies of any external sites you visit.
11. Changes to This Policy
We may update this policy from time to time, for example when we change the tools we use or when the law changes. The date at the top of this page shows when it was last updated. If we make a significant change, we will post the updated policy on this page.
12. Contact Us
For questions about this policy, to ask for access to or correction of your information, or to make a complaint, contact our Privacy Officer: Privacy Officer Made 4 Tradies (R J Kelsey) ABN 33 189 153 652 11 Gardenia Ave, Lane Cove West NSW 2066 Email: hello@made4tradies.com.au
© 2026 Made 4 Tradies. This Privacy Policy was last updated on 28 September 2026.