Privacy Policy

This Privacy Policy explains how XSCAPE Pressure & Lawn Management (ABN 20 718 194 132) (XSCAPE, we, us, our) collects, uses, stores, discloses and protects personal information.

We comply with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). Effective 28 April 2026.

We collect personal information that you give us, including:

• Identity & contact: name, email, mobile number, service address (and billing address where different).
• Service details: property type and size, access notes, photos of work areas (before and after), service history and feedback.
• Account credentials: email and a hashed password, or sign-in via a supported identity provider.
• Billing: invoice records, GST records, plan history. Full card numbers are handled directly by Stripe — we never see or store them. We only retain a card brand, last four digits, and Stripe customer/subscription IDs.
• Technical & usage: device type, browser, approximate location, IP address (stored in hashed form only), and pages visited, for fraud prevention and product improvement.

We do not knowingly collect sensitive information (as defined in the Privacy Act) such as health, racial origin or political opinions. If you provide it unsolicited, we will delete it unless required to retain by law.

We use personal information to:

• deliver and schedule the services you've booked;
• confirm property tier, send arrival windows, and bill you after a visit;
• respond to quotes, enquiries and support requests;
• send transactional messages (booking confirmations, invoices, visit reminders, completion updates);
• send marketing communications where you have opted in, in accordance with the Spam Act 2003 (Cth) — you can unsubscribe at any time;
• comply with legal, tax and regulatory obligations (e.g. ATO invoice retention);
• detect, investigate and prevent fraud, abuse and security incidents.

We use a small number of trusted service providers (sub-processors) to run the business. Information is shared with them only for the purposes above and they are bound by their own privacy and security obligations:

• Stripe Payments Australia Pty Ltd — payment processing, card storage and subscription management.
• Supabase Inc. — database hosting, authentication and photo storage (data hosted in the Asia-Pacific region where available).
• Vercel Inc. — website hosting and edge delivery.
• Resend — transactional email delivery.
• Twilio — SMS messaging.
• Our crew, contractors and insurers — for service delivery and insurance claims.
• Government, regulators or law enforcement — where compelled by law or to protect our legal rights.

We do not sell your personal information, and we do not share it with advertising networks unless you have given specific opt-in consent for retargeting.

Some of our service providers store data on servers located outside Australia (typically the United States and the European Union). When we disclose personal information to an overseas recipient under APP 8, we take reasonable steps to ensure that recipient handles it consistently with the APPs, including through contractual data-processing terms. Stripe, Supabase, Vercel, Resend and Twilio operate under recognised privacy frameworks (including Standard Contractual Clauses where applicable).

We protect your information using industry-standard controls including HTTPS/TLS in transit, encryption at rest with our database provider, role-based access controls, audit logging, principle of least privilege for staff access, and hashed passwords. No system is perfectly secure; if a notifiable data breach occurs, we will respond in accordance with the Notifiable Data Breaches scheme under Part IIIC of the Privacy Act, including notifying you and the Office of the Australian Information Commissioner (OAIC) where required.

We keep your account information while you're an active customer. Tax invoices and billing records are retained for 7 years after your last invoice, as required by Australian taxation law. Operational photos are retained for up to 2 years for quality assurance and insurance. After these periods we delete or de-identify the data.

Under the Privacy Act and APPs you may:

• request access to the personal information we hold about you (APP 12);
• request that we correct inaccurate, out-of-date, incomplete or misleading information (APP 13);
• request deletion of information we are not legally required to retain;
• withdraw consent for marketing communications at any time;
• request a copy of your information in a portable format where reasonable.

Email xscapelawnandpressure@gmail.com. We will verify your identity and respond within 30 days. If we refuse a request, we will explain why and how to complain.

We use a small number of essential cookies set by Supabase to keep you signed in to your account and to remember consent preferences. We may also collect basic, aggregated analytics (page views, referrer) to improve the website. Where we use third-party advertising or conversion-tracking pixels (e.g. Google Ads, Meta Pixel) we will either rely on legitimate interest where the law allows, or prompt you for consent.

You can disable cookies in your browser, but core account features will not work without essential cookies.

Our services are sold to property owners and occupiers aged 18 or over. We don't knowingly collect personal information from anyone under 18. If you believe we have, email us and we'll delete it.

We may update this policy from time to time. Any material change will be emailed to active subscribers at least 14 days before it takes effect. The current version is always available at this URL.

If you believe we have breached the APPs, please contact us first using the details below. We aim to acknowledge complaints within 2 business days and respond substantively within 30 days.

If you're not satisfied with our response, you can complain to the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au or 1300 363 992.

Privacy Officer, XSCAPE Pressure & Lawn Management — call 0487 065 031 or email xscapelawnandpressure@gmail.com. ABN 20 718 194 132, Fairfield NSW 2165.