Herdlo Privacy Policy

Entity: Amber Louise Burch trading as Herdlo (ABN 95 861 964 295) · 327 Sheoak Drive, Yallingup WA 6282, Australia · hello@getherdlo.com.

1. Australian Privacy Principles (APP 1 to APP 13)

Herdlo manages personal information in accordance with the Privacy Act 1988 (Cth), all 13 Australian Privacy Principles (APP 1 to APP 13), the Notifiable Data Breaches (NDB) scheme and the Spam Act 2003 (Cth), including automated computer program transparency under APP 1.7 to 1.9.

2. Information We Collect and Hold (APP 3 and APP 5)

We collect the business details, work email, suburb, trade and confirmed onboarding facts you enter so we can run your check, send your report, host your AI profile page and structured data, and manage your account. Consent records store a cryptographic HMAC-SHA256 salted hash of your IP address (keyed with IP_HASH_SALT) alongside the timestamp and consent version. See our Privacy Collection Notice.

3. Cross-Border Sub-Processors and Security (APP 8 and APP 11)

To run checks and host your account with TLS 1.3 encryption and passwordless email magic links, we use trusted processors in Australia, the United States, Japan (ap-northeast-1) and the European Union: Cloudflare (Workers, D1, KV and Turnstile), Stripe (PCI-DSS Level 1 billing), OpenAI, Google and Perplexity (official API sampling), Resend (transactional email), Kit (opt-in newsletter) and Meta (ad attribution when visiting from a campaign).

4. Access, Correction and OAIC Complaints (APP 12 and APP 13)

You can ask us to access, correct or delete your personal information any time at hello@getherdlo.com and we respond within 30 calendar days free of charge. If you have a privacy complaint, contact us first at hello@getherdlo.com; you may also escalate to the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au (1300 363 992).