Privacy policy
This policy explains how Stewart GT Pty Ltd as trustee for the Stewart Family Trust (ABN 53 210 231 383), trading as Change Hands ("Change Hands", "we", "us") handles personal information when you use changehands.com.au. We aim to handle it in line with the Australian Privacy Principles.
1. What we collect
- Account details: your name, email address and, if you give it, your phone number.
- Seller information: listing details, business financials, documents you upload and notes you add.
- Buyer information: what you are looking for (budget, location, industry), and details you share with sellers such as funding, deposit, timeframe, who is buying and experience.
- Messages between buyers and sellers on the site.
- Confidentiality agreements: the name you type, the date and time, and the IP address you sign from.
- Technical information needed to run the site, such as login cookies and server logs.
2. How we use it
- To run the site: accounts, listings, matching buyers with businesses, requests, NDAs and messages.
- To send emails about your account, matches, requests and NDAs. You can change how often we email you in your account settings.
- To check listings and generate summaries, reviews and match scores using AI tools.
- To keep the site secure, prevent misuse and meet our legal obligations.
3. Who sees your information
- Public listings show the business description, location area, asking price and summary figures, but not the seller's name or contact details.
- Detailed figures and documents are shown only to the seller, buyers the seller approves who sign the NDA, and our administrators.
- Sellers see a matched or requesting buyer's criteria and readiness details but not their name or contact details. Once a buyer signs the NDA, the seller can see the signed agreement, including the buyer's name.
- We do not sell your personal information.
4. Service providers and overseas storage
We use trusted providers to run the site. Some store or process information outside Australia:
- Supabase: database and logins (data hosted in Sydney, Australia).
- Vercel: website hosting (may process data in the United States and other countries).
- Resend: sending emails (United States).
- Anthropic: AI processing of listing text and buyer searches (United States).
5. Security and how long we keep it
- We use access controls so that private information is only available to the people allowed to see it, and encrypted connections (HTTPS).
- We keep information while your account is active and for as long as needed for legal and record-keeping purposes, including signed NDAs. You can ask us to delete your account.
6. Access, correction and complaints
- You can view and update most of your information in your account. To ask for a copy, a correction or deletion, email info@changehands.com.au.
- If you have a privacy complaint, email us and we will respond within 30 days. If you are not satisfied, you can contact the Office of the Australian Information Commissioner (oaic.gov.au).
7. Changes
We may update this policy. The date at the top shows when it last changed.