Privacy Policy

This policy explains how Bidra Pty Ltd (ACN 702 221 074), the operator of Bidra, handles personal information across the Bidra website, mobile apps, marketplace, support and safety operations. Privacy questions and complaints can be submitted through the published contact pathway.

Information provided directly can include name, username, email address, mobile number, date of birth, seller type, business details where supplied, suburb, state, postcode, profile information and account verification state.

If you choose to publish a Bidra business-directory profile, the business name, category, description, service area and any public website or public phone number you enter for that profile are intended to be displayed publicly until you unlist the profile.

Marketplace information can include listings, images, searches, watchlist and seller-follow activity, offers, orders, payment-status confirmations, handover records, feedback, messages, support conversations, reports, blocks and moderation records.

Technical and security information can include IP address, browser or device details, session and cookie identifiers, request records, timestamps, security events and limited usage data needed to operate, protect and improve Bidra.

Bidra collects information when a person creates or uses an account, publishes content, communicates, completes marketplace actions, contacts support or otherwise interacts with Bidra. Some technical information is collected automatically through essential cookies, application requests and security logs.

Bidra uses information to create and secure accounts; publish and discover listings and opted-in business-directory profiles; provide messages, offers, orders, notifications and support; verify eligibility; prevent fraud and abuse; investigate reports and disputes; enforce policies; maintain records; comply with law; and understand and improve service reliability and marketplace use.

Bidra does not sell personal information. Bidra does not use third-party behavioural advertising or cross-site advertising tracking unless that practice is introduced, disclosed and handled in accordance with applicable requirements.

When a person uses AI support chat, their support message and recent conversation context may be processed by Bidra's AI service provider to draft an answer. AI replies can be incorrect and may be escalated to an authorised Bidra support person.

Where an external AI service assists moderation, relevant report, listing, message, order or account evidence may be processed to produce an advisory safety analysis. AI does not make final account, payment, refund, dispute or enforcement decisions; authorised people remain responsible for those decisions.

Do not put passwords, verification codes, full bank details or other unnecessary sensitive information into support chat or marketplace messages.

Information may be disclosed to the other participant where needed for a marketplace transaction, to contracted providers that support hosting, storage, email, security, customer support, analytics, AI and optional payment or promotion services, and to advisers, regulators, courts, law enforcement or other parties where authorised or required by law.

When a seller connects an order-management or fulfilment service such as FLUF, that service can receive the buyer name and delivery recipient, address and contact phone needed to process that seller’s orders. The seller must explicitly authorise access, and can revoke it. Bidra sends change notifications without delivery contact details; the connected service retrieves order details through seller-scoped access.

Providers may process information only for contracted operational purposes and are expected to apply appropriate privacy and security safeguards. Bidra does not disclose private messages publicly, although authorised staff may review relevant records for support, safety, abuse prevention or legal compliance.

Some contracted technology providers and their subprocessors may process or store information outside Australia, including in the United States. The exact location can vary with provider infrastructure. Bidra remains responsible for taking reasonable steps appropriate to the service and applicable Australian privacy requirements.

Bidra uses essential cookies for sign-in, security and core operation, plus limited first-party analytics for reliability and marketplace improvement. Browser controls can restrict cookies, but blocking essential cookies may stop account features from working.

Bidra applies technical and operational controls intended to protect information against misuse, interference, loss and unauthorised access, modification or disclosure. No internet service is risk-free, so users should protect credentials and report suspected account compromise promptly.

Users can update available profile information and should keep account and listing details accurate and current.

Bidra keeps personal information only while reasonably needed for the purpose collected and for legal, accounting, security, fraud-prevention, moderation and dispute requirements. Retention periods vary by record type and unresolved obligations. Information that is no longer required is deleted or de-identified where reasonably practicable.

Users can request access to personal information, ask for correction, or permanently delete their Bidra account through the available account controls and published contact pathway. Bidra may verify identity before acting on a request and will explain any lawful reason a request cannot be completed.

The Bidra mobile app provides an in-app deletion flow requiring current-password re-authentication and explicit confirmation.

Account deletion removes the active account identity, profile information, public listings and other personal data that Bidra does not need to retain. Limited anonymised transaction, payment, fraud-prevention, moderation and dispute records may be retained where required for legal, accounting, security or marketplace-integrity purposes.

Deletion may need to wait while an order, dispute or active featured-listing purchase remains unresolved. Users who cannot access the app can request verified deletion through the public account-deletion and contact pathways.

Submit a privacy complaint through the contact form with enough detail for Bidra to investigate. Bidra will acknowledge and assess the complaint, may request identity verification or further information, and will communicate an outcome within a reasonable period.

If a person is not satisfied with Bidra's response, they may contact the Office of the Australian Information Commissioner or another regulator with jurisdiction. Account-deletion instructions are available at /account-deletion.

Bidra accounts and transaction features are for adults aged 18 and over. People under 18 may browse public content but must not create an account or transact through Bidra.

Bidra may update this policy when its services, providers or legal obligations change. The current version and revision date are published on this page. Material changes will be communicated where reasonably required.