local. ("we", "us", "our") is committed to protecting your privacy in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). This policy explains what data we collect, how we use it, and your rights.
Business account holders:
End customers (loyalty card holders):
We do not sell your data to third parties. We do not use your data for advertising purposes.
We share data only where necessary to provide the service:
All third parties are bound by data processing agreements and may not use your data for their own purposes.
All data is stored in Australia (AWS ap-southeast-2, Sydney). We use AES-256 encryption at rest and TLS 1.3 in transit. Access to production systems is restricted to authorised personnel only and is logged.
We will notify you within 72 hours of becoming aware of any data breach that is likely to result in serious harm, as required under the Notifiable Data Breaches scheme.
We retain your account data for as long as you have an active subscription. If you cancel or your account is terminated, we retain data for 30 days then delete it, unless we're required to retain it by law (e.g. financial records are kept for 7 years under Australian tax law).
Under the Australian Privacy Principles, you have the right to:
To exercise any of these rights, contact us at privacy@local.com.au.
Our website uses essential cookies only — for session management and security. We do not use tracking or advertising cookies. You can disable cookies in your browser settings, though some parts of the site may not function correctly.
For privacy-related enquiries, contact our Privacy Officer at privacy@local.com.au. If you're not satisfied with our response, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC).