Privacy Policy
Effective date: 7 November 2026
Key points
- What we collect: account details, supplier listings, billing details, and activity such as searches and contact reveals. Only what’s needed to run a business directory.
- What we don’t do: we don’t sell personal information, and we don’t use advertising, analytics or tracking cookies.
- Where it’s stored: in Singapore. Some of our providers also process it in the United States and Ireland.
- Supplier contacts are protected: contact details are shown only through logged, limited reveals. Anyone named in a listing can ask us to remove their details.
- Your choices: update your details, change email preferences, delete your account or ask for a copy of your data at any time (Part E).
- Questions or complaints: email admin@minesearch.au.
Contents
- Part A — About us and this policy (sections 1–2)
- Part B — What we collect and why (sections 3–6)
- Part C — Who sees it and where it goes (sections 7–8)
- Part D — Automated decisions (section 9)
- Part E — Your choices and rights (sections 10–14)
- Part F — Cookies and browser storage (section 15)
- Part G — Retention, security and other matters (sections 16–20)
Part A — About us and this policy
1. Who we are
MineSearch is operated by GET Partners Pty Ltd (ACN 702 232 666, ABN 37 702 232 666), trading as MineSearch Australia (MineSearch, we, us). MineSearch is an online directory that helps people in the Australian mining industry find suppliers of parts and services.
This policy explains how we collect, use, disclose and protect personal information under the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). It applies to minesearch.au and our related services (the Platform).
2. Who this policy covers
- Members: anyone who creates an account to search the Platform.
- Vendor users: Members who manage a supplier’s company listing, as its owner or as staff.
- People named in listings: individuals whose name, phone number or email appears in a supplier’s company profile or catalog, such as a sales contact. The supplier gives us these details, not the individual.
- Other visitors: people who use our login or account-recovery pages without an account, who apply for our founding vendor program or join its waitlist, or who contact us.
MineSearch is for businesses. Accounts are for people aged 18 or over acting for a business. We don’t knowingly collect information from anyone under 18; if we learn we have, we will delete it.
Part B — What we collect and why
3. What we collect
Account and profile
- Your email address and password. We never see your password: our authentication provider stores only a scrambled (hashed) version.
- Your name, and optionally your company, job title, phone number, profile photo and timezone.
- Your two-factor authentication setup, if you turn it on. It is compulsory for our administrators.
Email preferences
- Whether you’ve opted in to marketing and product-update emails, and when you last changed each setting.
- Which of our mailing lists you’re on (section 6).
Supplier (vendor) information
- Company profile: name, logo, cover image, description, capabilities, website, service areas, and contact email and phone.
- Catalog entries for parts and services, which may include a contact name, phone and email for each entry.
- Team membership: who belongs to each company, and their role.
- Company change history: who changed the profile, catalog, team or billing, and when.
- Billing records: plan, billing method, billing status and invoice details.
- Billing identity held by our payment provider, Stripe: billing email, company name, address, ABN and purchase order number. Card and bank details are entered on Stripe’s pages and never reach our servers.
Activity on the Platform
- Searches: the words you search for, how many results came back, and when.
- Contact reveals: when you choose to view a supplier’s contact details, we record who viewed which supplier’s details, and when.
- Supplier profile views and contact clicks.
- Security records: temporary search pauses and suspicious-activity flags on an account.
Device and technical information
- Device and network information. When you sign up, we record an identifier for your device and the IP address you signed up from, and store them with your account.
- Hosting logs. Our hosting and database providers keep short-term request logs, which include IP addresses and browser details.
People without an account
- An email address typed into our login page, if the login fails. We keep it to stop password-guessing attacks.
- Account-recovery requests: the email address and message you send us.
- Founding vendor applications and waitlist: your name, company, email, phone number, main category, how you heard about us, anything else you tell us, the campaign link you arrived from, and when you agreed to be contacted.
Messages you send us
- The content of emails and other messages you send us, such as support requests, and our replies.
4. How we collect it
- From you, when you sign up, complete your profile, set up a company listing, enter or upload a catalog, request an invoice, use the account-recovery form, apply for the founding vendor program, join its waitlist or contact us. When you upload a catalog spreadsheet, it is read in your browser and only its rows are sent to us; we don’t keep the file.
- From suppliers, who add their staff to their team and contacts to their listings.
- Automatically, as you use the Platform (activity, device and technical information).
- From our service providers: subscription and invoice status from Stripe, bot-check results from Cloudflare, and unsubscribe requests from our email provider, Loops.
If you don’t give us the information we ask for at signup, we can’t create your account. Optional profile details can be left blank.
5. How we use it
We use each kind of information only for the purposes below, a related purpose you’d reasonably expect, or as the law allows. We do not sell personal information.
| Why we use it | Information used |
|---|---|
| Create and run your account, and keep it secure | Email, password, name, profile details, two-factor setup |
| Show listings and connect buyers with suppliers | Company profiles, catalogs, service areas, contact details (through reveals) |
| Process subscriptions, invoices and payments | Billing records and billing identity |
| Send the emails described in section 6 | Email address, first name, account type, email preferences, mailing lists |
| Prevent scraping, fraud and misuse | Device and network information, login attempts, activity levels and security flags |
| Improve search, for example terms that return no results | Search words and result counts (anonymised after 90 days) |
| Keep a record of who changed what | Company and administrator change history |
| Meet our legal obligations, including tax and record-keeping | Billing records and invoices |
| Respond to your requests and complaints | Your contact details and what you tell us |
| Contact you about our launch and the founding vendor program | Founding vendor application and waitlist details |
We use device and network information only to prevent fraud and abuse, such as one person creating many accounts.
Statistics that don’t identify anyone. We may combine or de-identify information to produce statistics, such as search trends by category or the number of suppliers in a region. We use these to run and improve MineSearch, and may publish them. They can’t be used to identify you, and we don’t try to re-identify them.
Suppliers don’t see who viewed them. Records of searches, profile views and contact reveals are seen only by our administrators. Suppliers can’t see which Members viewed their listing or revealed their contact details.
6. Emails we send
| Type | Examples | Who gets it | Can you opt out? |
|---|---|---|---|
| Account emails | Email confirmation, password reset, security codes, welcome emails, billing notices | The person it concerns | No, while you have an account |
| Service notices | Changes to our terms, planned maintenance | Every active account | Yes, through the unsubscribe link |
| Urgent notices | A data breach, or a security or billing problem with your account | Everyone affected, including people who have unsubscribed from service notices | No |
| Product updates | New features | Only people who opt in | Yes, at any time |
| Marketing | Offers and news about MineSearch | Only people who opt in | Yes, at any time |
Marketing and product updates are off unless you switch them on, at signup or in your notification settings. Every marketing, product-update and service-notice email includes an unsubscribe link. Unsubscribing through a link or our email provider’s preference page updates your settings with us automatically.
Part C — Who sees it and where it goes
7. Other users, our team and the law
Other users
- Supplier listings (company profile, catalog, service areas) are visible to logged-in users.
- Supplier contact details (company and catalog contacts) are shown only when a logged-in user chooses to reveal them. Reveals are logged and limited.
- Images (profile photos, logos and cover images) are stored at web addresses that anyone with the link can open.
- Your own account details are not shown to other Members.
- Members of a supplier’s team can see the team list, billing status and company change history.
Think before you publish. Anything in a company listing can be seen by logged-in users. Suppliers should only add a staff member’s details with that person’s permission (section 13), and shouldn’t include information they wouldn’t want other businesses to see.
Our administrators can see account, company, billing and activity records to run the Platform, handle requests and review suspicious activity. Administrator actions are recorded in an audit log.
Others, where the law allows. We may disclose information where the law requires or permits it, for example to a regulator or law enforcement agency, or to lessen a serious threat to someone’s safety.
Professional advisers. We may share information with our lawyers, accountants, auditors and insurers where they need it to advise or protect us, under a duty of confidentiality.
If our business changes hands. If MineSearch, or part of it, is sold, merged or restructured, personal information may pass to the new owner or to a prospective buyer under confidentiality. The new owner must handle it in line with this policy, and we will tell you before your information becomes subject to a different privacy policy.
Links to other websites. Supplier listings may link to suppliers’ own websites. We don’t control those sites, and their own privacy policies apply.
8. Service providers and overseas disclosure
We use service providers for hosting, data storage, payments, email and bot protection. Our database, files and backups are stored in Singapore. Some providers also process information in the United States, Ireland and other countries where they run global networks.
| Service | What it handles | Where |
|---|---|---|
| Hosting, database and file storage | All the information in section 3, including backups and short-term request logs | Singapore, with a global network that serves pages from locations near you |
| Payments | Billing email, company name, address, ABN, purchase order number, and card or bank details | Australia, Ireland and the United States |
| Your email address, first name, account type, which mailing lists you’re on, the content of emails we send you, and the details you give us if you apply for the founding vendor program or join its waitlist | United States | |
| Bot protection | Your IP address and browser information on our login and signup pages, and on our founding vendor form | Global network, including the United States |
We choose providers with recognised security practices, and their contract terms require them to protect personal information. We take reasonable steps to make sure overseas recipients handle it consistently with the APPs.
Part D — Automated decisions
9. Automated decisions
Some parts of the Platform act automatically. None of them disables or removes an account by itself: any lasting action is decided by a person.
| What | Information used | What happens |
|---|---|---|
| Bot checks | IP address and browser information | A signup, login or password action is refused if the check fails |
| Login protection | Recent failed login attempts | Login is paused for a short time after repeated failed attempts |
| Usage limits | How often you’ve searched, revealed contact details, uploaded or made requests in a set period | The action is paused or refused for a short time if you go over the limit. Repeated breaches are flagged for an administrator |
| Suspicious-account flags | Device and network information, account details and unusual activity patterns | The account is flagged for an administrator to review. The administrator decides whether to act |
| Search ranking | How well a listing matches the search, and the supplier’s plan | Results are ordered by how well they match. Suppliers on our Full plan get a small boost among similar matches |
| Listing visibility | A supplier’s payment and account status | Suppliers with unpaid or lapsed subscriptions are hidden from search. Administrators can override this |
If you think an automated decision has affected you unfairly, you can ask for a person to review it (Part E).
Part E — Your choices and rights
10. Your choices at a glance
| If you want to | Do this |
|---|---|
| Update your profile or company details | Change them in your account or company settings |
| Turn marketing or product-update emails on or off | Use your notifications page, or the unsubscribe link in any of those emails |
| Get a copy of your information | Email admin@minesearch.au (section 11) |
| Correct something you can’t edit yourself | Email admin@minesearch.au (section 11) |
| Delete your account | Use “Delete account” in your account settings (section 12) |
| Remove your details from a supplier’s listing | Ask the supplier, or email us (section 13) |
| Ask a person to review an automated decision | Email admin@minesearch.au |
| Make a complaint | See section 14 |
11. Accessing and correcting your information
To get a copy of the personal information we hold about you, or to ask us to correct it, email admin@minesearch.au. We will respond within 30 days. There is no charge.
We may need to confirm your identity first. In limited cases the law allows us to refuse access, for example where giving it would prejudice the investigation of suspected fraud or misuse. If we refuse access or correction, we will tell you why in writing and how to complain.
12. Deleting your account
When you delete your account, you are signed out straight away and can’t use it again. We permanently delete your account 90 days later (see section 16). During those 90 days, you can ask us to reinstate it through the account-recovery page.
If you own a company listing, deleting your account removes the listing from search immediately, and its subscription ends at the end of the paid period. To keep the listing, transfer ownership to someone else in your team first.
13. If your details appear in a supplier’s listing
Suppliers sometimes list a staff member’s name, phone number or email as a contact. Our supplier terms require suppliers to have that person’s permission and to tell them their details will appear on MineSearch.
If your details appear in a listing and you want them changed or removed, contact the supplier, or email us at admin@minesearch.au. We will remove them within 14 days and let the supplier know. You don’t need a MineSearch account to ask.
14. Complaints
If you have a privacy complaint, email admin@minesearch.au with the details. We will acknowledge it within 7 days and aim to resolve it within 30 days.
If you’re not satisfied with our response, you can complain to the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au or on 1300 363 992.
Part F — Cookies and browser storage
15. Cookies and browser storage
We use one essential cookie, to keep you logged in. We don’t use analytics, advertising or tracking cookies, so there’s nothing to opt out of.
- Cloudflare may set cookies inside its bot check on our login and signup pages and our founding vendor form, for security.
- Stripe sets cookies on its own payment pages, for payments and fraud prevention.
- We also use essential browser storage for security features. It contains no personal information.
Part G — Retention, security and other matters
16. How long we keep it
We keep personal information only as long as we need it, then delete or anonymise it. A scheduled job does this every 24hrs.
| Information | How long we keep it |
|---|---|
| Your account, after you delete it | 90 days, then permanently deleted, including your profile, photo and activity records |
| An account disabled for misuse | 12 months after it was disabled |
| A supplier’s company data, after the owner deletes their account | 90 days |
| A supplier’s company data, after its subscription ends | 12 months |
| Contact reveal, profile view and contact click records | 90 days |
| Search records | Linked to your account for 90 days, then anonymised. We keep the search words, without who searched, to improve search |
| Account-recovery requests | 90 days after we resolve them |
| Founding vendor applications and waitlist sign-ups | 12 months after you apply or join the waitlist, then deleted |
| Reviewed security flags | 12 months |
| Company and administrator change history (audit logs) | 2 years |
| Your contact record with our email provider | Deleted when your account is closed |
| Security records, hosting logs, backups and images no longer in use | A short period, usually no more than 30 days |
| Invoices and billing records held by Stripe | As long as required for tax and legal purposes |
17. How we protect it
- Access controls in our database limit each user to the information they’re allowed to see.
- Passwords are stored only in scrambled form, must meet minimum standards, and are checked against known breaches when you set them in our forms.
- Two-factor authentication is available to everyone, and stronger controls apply to our administrators.
- Logins are protected against automated attacks, and sessions end automatically.
- Sensitive account changes need extra confirmation.
- Contact details are released only through logged, limited reveals.
- Card and bank details are entered only on Stripe’s secure pages.
- All traffic is encrypted, and we use standard web security protections.
- We review and update these controls as the Platform grows.
Help us keep your account safe. Use a strong password you don’t use anywhere else, turn on two-factor authentication, and sign out of shared devices. If you manage a supplier’s team, remove people promptly when they leave your business. Tell us straight away at admin@minesearch.au if you think someone else has used your account.
No system is completely secure. If a data breach is likely to result in serious harm, we will notify the people affected and the OAIC, as the Notifiable Data Breaches scheme requires.
18. Using MineSearch anonymously
You can read general information about MineSearch without an account. To search listings or reveal contact details, you need an account in your own name. This is because we have to limit and log that activity to protect suppliers and the people named in their listings from scraping and misuse.
19. Changes to this policy
We may update this policy from time to time. We will post the new version here with its effective date, and email account holders about significant changes before they take effect.
20. Contact us
GET Partners Pty Ltd, trading as MineSearch Australia
Email: admin@minesearch.au
Postal address: 15 Gas Street, Singleton NSW 2330
Last updated: 7 November 2026