Privacy Policy

This Privacy Policy applies to the ACBA Directory platform operated by Australian Christian Business Awards. It covers the public website, account registration, member dashboard, business listing management, billing features, and related communications.

If you have questions or privacy requests, contact privacy@acbadirectory.com.

Depending on how you use the platform, we may collect:

• account details such as your name, email address, phone number, and login identifiers;
• business listing details such as business name, slug, category, short and full descriptions, website, logo, email, phone, city, state, country, and social media links;
• membership and billing details such as selected plan, subscription status, renewal dates, founding-member status, Stripe customer ID, Stripe subscription ID, invoice references, and checkout history;
• transactional communication data such as payment confirmation and account email delivery details;
• technical, authentication, and security data made available through our infrastructure or service providers, such as session data, IP address, browser details, device information, and event logs.

If you create and publish a business listing, the information you choose to include in that listing may be visible to the public through directory pages, search pages, and business detail pages.

Public information may include your business name, category, descriptions, website, contact information, location, logo, social links, publication date, and membership-related indicators such as founding-member status or directory badges.

We use personal information to:

• create, authenticate, and manage user accounts;
• let users create, edit, publish, and manage business listings;
• process subscriptions, billing events, renewals, cancellations, and account entitlements;
• send transactional emails such as payment confirmations and account notices;
• operate, secure, troubleshoot, monitor, and improve the platform;
• enforce our Terms, prevent abuse, and comply with legal obligations.

We share information only as reasonably necessary to run the platform, process payments, communicate with users, or comply with the law.

• Supabase helps us provide authentication, database storage, and application data services.
• Stripe helps us process subscriptions, billing, and payment-related records. We do not store full payment card details on our own systems.
• Resend helps us send transactional emails such as payment confirmation messages.
• We may also disclose information to advisers, service providers, regulators, courts, law enforcement, or parties involved in a business transfer.

The platform uses essential cookies, session storage, or similar technologies needed to keep users signed in, maintain sessions, and support core application functionality.

If you later add analytics, advertising, or optional tracking tools, this policy should be updated to describe those technologies and any user choices that apply.

In practice, this means we retain information for as long as reasonably necessary to operate the platform, maintain billing and business records, resolve disputes, enforce agreements, and comply with legal obligations.

Our providers may store or process information in countries other than the one where you are located. By using the platform, you acknowledge that information may be transferred to and processed in other jurisdictions, subject to reasonable safeguards and contractual arrangements where required.

We use reasonable technical and organisational measures to protect the information we hold, including access controls and service-provider security features. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

Subject to applicable law, you may request to:

• access the personal information we hold about you;
• correct inaccurate or outdated information;
• delete your account or certain information;
• object to or restrict certain processing activities;
• receive information about billing and account records.

We may still retain some information where required for legal, accounting, security, fraud-prevention, or contractual reasons.

The platform is not intended for children under 18, and we do not intend to knowingly collect personal information directly from children under that age. If you believe a child has provided personal information to us, contact privacy@acbadirectory.com.

We may update this Privacy Policy from time to time to reflect changes to the platform, service providers, legal requirements, or our data practices. The updated version will be posted on this page with a new effective date.