ConnectBuilt Privacy Policy

ConnectBuilt ("ConnectBuilt," "we," "us," or "our") operates connectbuilt.com and connectbuilt.au (the "Platform"), Australia's Construction Career & Opportunity Network. This Privacy Policy explains how we collect, use, disclose and protect personal information when you use the Platform, whether you're a construction professional building a ConnectBuilt Passport™ or a business searching for talent.

We are committed to handling personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

By using the Platform, you agree to the collection and use of information as described in this policy. If you do not agree, please do not use the Platform.

Entity details:
Saso Trajanovski, trading as ConnectBuilt
ABN: 59 043 037 053
Privacy contact: privacy@connectbuilt.com

We use personal information to:

• Create and maintain your ConnectBuilt Passport™ or business account
• Enable businesses to search, filter and evaluate candidate Passports™
• Facilitate the unlock process so businesses can connect directly with candidates
• Verify qualifications, licences and references where you have chosen to provide them
• Communicate with you about your account, platform updates, and (where you've consented) marketing
• Process payments once pay-per-contact and subscription features are live
• Monitor, maintain and improve the Platform, including analytics and troubleshooting
• Detect, investigate and prevent fraud, misuse or breaches of our Terms of Service
• Comply with our legal obligations

We do not sell personal information to third parties, and construction professionals are never charged to create or maintain a Passport™ profile — all Platform revenue comes from businesses.

Where required, we rely on your consent to collect and use personal information (for example, when you voluntarily create a Passport™ profile or upload references). You can withdraw consent at any time by updating your profile settings or contacting us, though this may limit your ability to use certain features.

A core design principle of ConnectBuilt is that businesses cannot see a candidate's direct contact details before unlocking their profile. Our backend enforces this at the database level (not just in the app interface), so contact information is structurally inaccessible until an unlock event occurs.

When a business unlocks your profile:

• We record that the unlock occurred (which business, when)
• Your contact details become visible to that specific business
• You may be notified that your profile was unlocked, depending on your notification settings

This does not affect your other profile content (qualifications, project history, Opportunity Status™, etc.), which remains visible to businesses conducting searches so they can assess fit, in line with the reverse-marketplace model you signed up for.

Once ConnectBuilt's pay-per-contact and subscription features go live, business payments will be processed through Stripe. We do not store full credit card numbers on our own servers — payment card data is handled directly by Stripe in accordance with its own privacy policy and PCI-DSS compliance obligations. We retain records of transactions (amount, date, unlock associated with payment) for accounting and dispute-resolution purposes.

Construction professionals are never charged and do not provide payment information to use the Platform.

We disclose personal information to:

• Businesses on the Platform, limited to profile content, and contact details only after an unlock (Section 5)
• Service providers who help us operate the Platform, including: Supabase (database and backend infrastructure), Lovable (application hosting/build infrastructure), Stripe (payment processing, once live), and analytics/communications providers
• Referees, if you ask us to contact them for a reference check
• Regulators or law enforcement, where required by law
• A successor entity, in the event of a business sale, merger or restructure, subject to the same privacy protections

We require our service providers to protect personal information consistently with this policy.

Some of our service providers (including elements of our Supabase and hosting infrastructure) may store or process data on servers located outside Australia. Where personal information is disclosed overseas, we take reasonable steps to ensure the overseas recipient handles it in a manner consistent with the Australian Privacy Principles, including through contractual protections with our providers.

We use cookies and similar technologies to keep you logged in, remember preferences, and understand how the Platform is used (via analytics). You can control cookies through your browser settings; disabling them may affect Platform functionality.

We take reasonable technical and organisational steps to protect personal information from misuse, interference, loss, unauthorised access, modification or disclosure, including:

• Database-level access controls that prevent premature disclosure of contact details (Section 5)
• Encrypted connections (HTTPS) between your device and our servers
• Restricted internal access to personal information on a need-to-know basis

No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

We retain personal information for as long as your account is active, or as needed to provide the Platform, comply with legal obligations, resolve disputes, and enforce our agreements. You may request deletion of your account and associated data at any time (Section 12), subject to records we're required to retain by law (e.g. financial transaction records).

Under the Australian Privacy Principles, you have the right to:

• Access the personal information we hold about you
• Correct inaccurate or outdated information
• Request deletion of your account and personal information, subject to legal retention requirements
• Opt out of marketing communications at any time
• Withdraw consent for optional data uses (e.g. reference checks, marketing)
• Complain if you believe we've mishandled your personal information

To exercise any of these rights, contact us at privacy@connectbuilt.com. We'll respond within a reasonable timeframe, generally 30 days.

If you're unsatisfied with our response, you can lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.

The Platform is intended for construction industry professionals and businesses and is not directed at children. We do not knowingly collect personal information from anyone under 18. If you believe a minor has provided us with personal information, please contact us so we can remove it.

We may update this Privacy Policy from time to time to reflect changes in our practices, the Platform, or legal requirements (for example, as pay-per-contact and subscription payment features roll out). We'll post the updated policy on this page with a revised "Last updated" date. Material changes will be highlighted to registered users where appropriate.

If you have questions, concerns, or requests regarding this Privacy Policy or your personal information, contact:

Saso Trajanovski, trading as ConnectBuilt
Email: privacy@connectbuilt.com