Privacy Policy

ReferOn is a referral-management platform for Australian professionals. It is operated by Thomas-Hudson Roche trading as ReferOn (ABN 56 481 369 463), a sole trader based in Australia. In this policy “we”, “us” and “ReferOn” mean that business, “members” means professionals with a ReferOn account, and “clients” means the people those members refer to one another.

When you create and use a ReferOn account we collect:

• Identity and contact details — name, email address, business name, profession, and any licence or registration number you choose to provide.
• Account content — your prospecting profile, referral fee terms, notes you write, and the referrals and deals you create or receive.
• Usage and technical data — log-in times, pages accessed, IP address, browser and device information, collected to keep the service secure and working.
• Payment information — if you subscribe, our payment processor collects your card and billing details. We never see or store your full card number.

This is the most important part of this policy. When a member sends a referral, they provide us with personal information about their client — typically the client's name, phone number, email address, and notes about what the client needs.

Clients do not have ReferOn accounts and generally have no direct relationship with us. We collect this information on behalf of the member who submits it, and we hold it so it can be passed to the receiving professional.

Members must have the client's consent before submitting their details. This is a condition of using ReferOn, and members confirm it each time they send a referral. If you are a client and believe your details were shared without your consent, contact us at support@referon.com.au and we will investigate and, where appropriate, delete the information.

We limit exposure of client information by design: a receiving professional sees only the client's initials and the nature of the enquiry until they accept the referral. Full contact details are revealed only on acceptance. Client names and contact details are never shown in the public network directory, in financial statements, or to anyone who is not a party to that referral.

• To provide the service — creating accounts, transmitting referrals between members, tracking deal progress, and recording agreed fees.
• To communicate with you — account confirmations, password resets, notifications about referrals and deals, and service announcements.
• To operate our network quality controls — calculating rating scores and acting on blocks between members.
• To take payment for subscriptions and, where members choose, to facilitate referral-fee payments between them.
• To keep the platform secure, prevent misuse, and meet our legal and record-keeping obligations.

We do not sell personal information. We do not use client information for marketing, and we do not disclose it to anyone outside the referral it belongs to.

We disclose personal information only to:

• The member receiving a referral — limited to the client information needed to act on it.
• Our service providers, who process data on our instructions: Supabase (database and authentication hosting), Vercel (application hosting), Stripe (payments), and our email delivery provider.
• Professional advisers, or law enforcement and regulators, where we are required or authorised by law.

Some of these providers store or process data outside Australia, including in the United States and the European Union. We take reasonable steps to ensure they handle personal information consistently with the Australian Privacy Principles.

Data is encrypted in transit and at rest, access is restricted by database-level security rules so members can only reach data belonging to their own referrals, and administrative access is limited. No system is perfectly secure, but we take reasonable steps to protect personal information from misuse, loss, and unauthorised access.

We keep member account data while your account is open. If you close your account we retain records of completed referrals and deals for up to seven years, because they evidence commercial arrangements and may be needed for tax and dispute purposes. Client details attached to a referral are deleted on request unless we are required to keep them.

If a data breach occurs that is likely to cause serious harm, we will notify affected individuals and the Office of the Australian Information Commissioner as required by the Notifiable Data Breaches scheme.

You may ask us to:

• Give you access to the personal information we hold about you.
• Correct information that is inaccurate, out of date, or incomplete.
• Delete information we no longer need to keep.
• Explain how your information has been used or disclosed.

Email support@referon.com.au and we will respond within 30 days. We may need to verify your identity first. There is no charge for making a request.

We use cookies that are necessary to keep you signed in and to keep the service secure. We also use analytics to understand how the platform is used in aggregate. We do not use advertising cookies and we do not track you across other websites.

If you believe we have mishandled your personal information, contact us first at support@referon.com.au. If you are not satisfied with our response, you can complain to the Office of the Australian Information Commissioner at oaic.gov.au or on 1300 363 992.

We may update this policy as the platform changes. The date at the top shows when it was last revised, and we will tell members about significant changes before they take effect.