Privacy
What we collect, why, and how to make us delete it. This describes what the platform actually does: pricing and holding a price, verifying cleaning contractors, and, from your first booking, running and recording the work at your site.
What we collect
If you price a site and ask us to hold that price, we collect your email address, the postcode of the site, when you are looking to change, and the configuration you priced — site type, approximate area, scope level and visits per week. We do not ask for your name, your phone number or your address, and we do not have a field for them.
If you register as a contractor, we collect your email address, the areas you would cover, how your business is set up, crew size, whether you hold your own public liability cover, whether you already clean for other clients, the equipment you own and your vehicle type.
If you tell us you are outside Adelaide, we collect your email address, your city or town and your timeframe.
If you ask us to email you a price, we collect your email address and the configuration you priced, and nothing else. You get that one email, and nothing after it unless you reply.
We also record, without identifying you: which price configurations were viewed, whether a visitor changed any of the calculator inputs, and a short list of page milestones: that a section of the page came into view, how far the page was scrolled, roughly how long it stayed open, and which of the calculator’s buttons was opened. A random number held in your browser tab until you close it ties these together. Nothing you type is recorded, the session is not recorded or replayed, none of it leaves this site, and it is not linked to your email address. This is how we find out where the page loses people.
If you arrive from one of our Google ads, the page tells Google when that ad led to a priced site or a held price. It does this without cookies, and it sends no email address and no details of your site: the click reference Google put in the link is all that goes back.
If you are a contractor getting verified
Getting verified collects more than registering interest does, because we are checking that you are who you say you are and insured to do the work. It is the most sensitive information on this site and it is handled separately from everything above.
Your business. Your ABN, and the entity name, ACN, entity type, GST status and registered business names that the Australian Business Register returns for it. Your trading name, contact name and mobile, postal address, the areas you cover, crew size, vehicle and equipment.
Your insurances. For each policy: the insurer, policy number, the name the policy is in, the sum insured and the period — and the certificate itself.
Your people. For each person who would attend a site: their full name, their role, optionally a mobile, and, if the business adds one, a photograph of them, which is shown to clients of the sites they attend and on their identification card and is deleted when they are removed from the register. For each of them, the reference number and issue date of a current national police check, and their photo ID.
Location at check-in. When one of your people checks in at a site, the portal asks their phone for its position once and records the coordinates and accuracy of that moment, so the client’s record can say the attendance happened at the address. The phone can refuse and the check-in still works; the client then sees the time only. Location is never sampled at any other time, and the client never sees the coordinates, only whether the arrival was confirmed.
Your referees. The business, name, email, phone and relationship of the two referees you nominate.
Your declarations. How the business is set up, whether you clean for other clients, whether you employ or engage anyone else, and the acknowledgements you tick — each recorded with the date you gave it. We ask these again about every thirteen weeks and keep the earlier answers rather than overwriting them.
Police checks and photo ID — sighted, recorded, deleted
A police check is sensitive information under the Privacy Act, which is why we ask for your consent before collecting one and why we ask for as little as possible: we do not collect dates of birth, and a crew member’s mobile number is optional.
The file is deleted the moment a decision is recorded against it. What is kept is the reference number, the issue date, the date it was sighted and who sighted it. The same applies to photo ID. There is no route in the system that restores a deleted file, because it is gone rather than hidden.
Insurance certificates are different: those we keep. They are retained privately for the life of the policy and for seven years afterwards, because if there is ever a claim or a dispute we have to be able to show what we sighted and when. That is a deliberate choice and the opposite of what we do with checks.
Who sees your verification documents
Jordan, and nobody else. Documents are stored privately and are never given a public address. Every single time a stored document is opened it is recorded — who opened it, and when. Clients never see them. We do not send your certificates on to anyone.
Two disclosures you should expect, because you asked for them. Your ABN is sent to the Australian Business Register to be checked. And your referees are contacted — they will be told that you nominated them and asked what you did for them, whether you turned up, and whether they would have you back.
What we do with it afterwards
We record expiry dates so we can tell you before something lapses rather than after. When a policy or a check runs out, the system emails you and, depending on which one it is, may pause new work until it is replaced. That is the only automated decision this site makes about you, and a person can override it — email us.
Being verified is not being offered work, and a nominated person does not attend a site until their check has been sighted.
If you book a site
From the first booking we hold more about you than the waitlist did, because we are running the work. We collect the business name, contact name, email and phone of the person booking; the site address and the details you priced (type, area, washrooms, kitchens, frequency, scope level); the price you accepted and the dated scope it was accepted against; and the portal link we issue you, which is an unguessable token rather than a login. We keep a record of each visit: the date, the business that attended and the named person, check-in and check-out times, the checklist, and the photographs taken at your site during the visit. If you report a problem from your portal we keep your report in your own words and how it was resolved.
Access information. Alarm and lockbox codes are never written into emails, offers or the portal. If you give us one, it is stored encrypted, every time it is revealed is recorded with the reason, and it is handed over in person at the first attendance. If you change it, tell us and the old one is marked returned.
Payment. For now you are invoiced and pay by bank transfer, so we hold no card details. When card or direct-debit payments are introduced, the details go to the payment processor and never to us; we would hold only a reference and the amounts.
Who sees it. The independent cleaning business that accepts your site is given the address, the access arrangement, your contact name and phone for the night, and the scope. Nobody else. Their people see the same on their phone at the site. The photographs are visible to you in your portal and to the business that took them. We do not publish them, use them in marketing, or share them with anyone else without asking you.
How long. Records of attendances and payments are kept for at least five years after the year they relate to, because tax law requires it. Photographs stay with the visit record for the same period. Access codes are deleted when you tell us they have changed or when the site ends; the record that a code existed and when it was revealed is kept with the attendance records.
What we do not collect
No card details, ever; see Payment above. No advertising or third-party tracking cookies. No analytics that follow you to other websites. No session recording. No profiles bought from anyone else.
Why we collect it
Four reasons, and no others. To reply to you about your site and a start date. To hold the price you were shown. To send you a price when you ask for one. And to decide where to open first, which is set by where clients and contractors overlap — which is the only reason we ask for a postcode at all.
What we will send you
One reply about your site and a start date, and the scope document we promised at the time you registered. We do not run a newsletter, and we will not call you. Every email we send carries a working unsubscribe link and identifies SARTO GROUP PTY LTD as the sender. Unsubscribing deletes you from the list.
Who else sees it
Our hosting and database provider, and our email provider, both acting on our instructions. We do not sell your information, we do not trade it, and we do not share it with cleaning contractors. If we match you with a contractor business, they receive what the section above says and nothing more. Our providers: Cloudflare (hosting, database and file storage; data may be processed in Australia or the United States), Resend (email, United States), and the Australian Business Register for ABN checks. Each acts on our instructions and none may use your information for its own purposes. Where a provider is outside Australia we take reasonable steps to ensure it handles your information as the Australian Privacy Principles require. If we ever match you with a contractor, that will be because you asked us to and you will be told first. Contractor verification adds the two disclosures described above — the Australian Business Register, and your own nominated referees.
How long we keep it
If you registered interest: until you ask us to delete it, or until we decide not to build this — in which case we delete the lot and tell you we have.
If you were verified as a contractor: police checks and photo ID as described above, which is to say the documents are not kept at all. Insurance certificates for the life of the policy plus seven years. The record of what we verified, and when, we keep for as long as we may need to account for having placed you on a client’s site — you can ask us to delete it, and where we are required to keep something we will tell you what and why rather than refusing.
Getting it, correcting it, or deleting it
Email hello@sarto.com.au and ask. We will send you everything we hold about you, correct anything wrong, or delete it, within a reasonable time and at no cost. You do not have to give a reason.
Security
Data is held encrypted in transit and at rest with our provider. Access is limited to the people who need it. We will tell you promptly if anything happens that affects your information, and we will notify the Office of the Australian Information Commissioner where the law requires it.
Complaints
Email us first at hello@sarto.com.au. If we do not resolve it, you can complain to the Office of the Australian Information Commissioner at oaic.gov.au.
Changes
If we change this, the date at the top changes and the current version is always here. If a change materially affects information we already hold about you, we will email you about it rather than quietly updating the page.