1. Who we are
DadsOrder is operated by OceanX Consulting Pty Ltd (ABN 67 615 055 368) ("we", "us", "our"). OceanX is the entity responsible for personal information collected through the DadsOrder website and related services. Contact our Privacy Officer at help@dadsorder.com.
2. What we collect
- Account details — name, email, mobile number, password (stored hashed), suburb/postcode, and your role (customer or supplier).
- Supplier business and verification details — business name, ABN, GST declaration, category, service area, listings, photos/videos, licences, permits, registrations, insurance evidence, expiry dates, Stripe onboarding status and other evidence relevant to the services offered.
- Transaction records — orders, quotes, briefs, amendments, invoices, payouts and dispute records.
- Communications — messages sent through the Platform, support emails, and reviews.
- Technical data — device/browser information, log data and general location inferred from your suburb, used to run and secure the service.
We do not collect sensitive information as defined by the Privacy Act unless you volunteer it (for example, a dietary or allergy note you choose to include in an order). Please only share what is necessary.
3. How and why we use it
We use personal information to: create and manage accounts; match customers and suppliers; process payments and releases; issue tax invoices; send transactional notifications by email and SMS; verify suppliers; prevent fraud and abuse; resolve disputes; provide support; improve the Platform; and comply with our legal obligations. We do not sell personal information.
4. When we disclose it
- To the other party of a transaction — to make a booking work, a customer and supplier see the information reasonably needed to communicate and fulfil the order (for example first name, order details and messages).
- To service providers — payment and connected-account processing (Stripe), email delivery (Resend), SMS delivery (Cellcast), hosting, security, encrypted object-storage backup and, if document-assisted review is enabled, an AI document-processing provider identified in the upload notice. These providers receive only information reasonably needed for their function and handle it on our behalf or under their own applicable terms.
- Where required by law — to courts, regulators or law-enforcement, or to protect rights, safety and property.
- Business transfers — in connection with a sale or restructure of our business, subject to this policy.
5. Payment information
Card payments are processed by Stripe. Full card numbers are entered with, and stored by, Stripe — they do not touch our servers. We retain only limited references needed to reconcile orders, refunds and payouts.
6. Overseas disclosure
Some service providers may store or process information outside Australia, including in the United States or European Union and in other locations disclosed by those providers. This may include payment, communications, hosting and encrypted backup infrastructure. Where APP 8 applies, we take reasonable steps to ensure an overseas recipient handles personal information consistently with the APPs. Where we instead rely on informed consent or another legal exception, we will provide any notice required by law.
7. Security and retention
We take reasonable technical and organisational steps to protect personal information: passwords are hashed using bcrypt, access is restricted, connections are encrypted in transit, provider credentials are protected, and operational data is backed up to access-controlled object storage. No system is perfectly secure. We keep personal information only as long as reasonably needed for the purposes above or as required by law (including tax, transaction, fraud and dispute records), then delete or de-identify it. Backup copies age out under the applicable backup-retention schedule rather than disappearing immediately from every backup.
8. Marketing and notifications
Transactional messages (order updates, receipts, verification, dispute notices) are part of the service. Any promotional messages include an opt-out, and you can unsubscribe at any time by contacting us. SMS is only sent to numbers that have been verified.
9. Cookies and analytics
We use essential cookies/local storage to keep you signed in and to operate the app. We may use privacy-respecting analytics to understand and improve usage.
10. Access, correction and choices
You can access and update most information in your account. You may request access to, or correction of, the personal information we hold about you, or ask us to delete it (subject to records we must keep by law), by emailing help@dadsorder.com. We will respond within a reasonable time.
11. Complaints
If you have a privacy concern, contact our Privacy Officer at help@dadsorder.com and we will investigate. If you are not satisfied with our response, you may contact the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.
12. Changes to this policy
We may update this policy from time to time. The current version is always on this page, with the effective date shown above.
13. Automated processing
We use software to rank and match marketplace listings, calculate platform trust indicators, detect suspicious activity, send operational reminders and support payment or dispute workflows. If enabled and disclosed at upload, document-assisted review may extract document type, names, identifiers and expiry dates and flag missing or inconsistent information. It does not determine whether a document is legally sufficient and does not finally approve or reject a Supplier. OceanX does not use a solely automated decision to determine a person's legal rights or finally approve a Supplier. Material account, supplier-verification and dispute decisions can be reviewed by a person. You may contact our Privacy Officer for information about, or review of, a decision that materially affects you.
OceanX Consulting Pty Ltd · ABN 67 615 055 368 · Sydney, Australia · help@dadsorder.com