Skip to content
CrewLink

Privacy Policy

Last updated: 29 July 2026

CrewLink is an Australian marketplace where construction and trades businesses and subcontractors find each other, work together, and rate each other afterwards. This policy explains what we collect, why, and who can see it.

Who we are

CrewLink is operated by Ocon Concrete Group (Australia). For any privacy question, or to request access to or deletion of your data, contact privacy@crewlink.au.

What we collect

Information you give us

  • Account:your email address, password (stored only as a cryptographic hash — we never see it), name, and account type (labour-hire company, trade company, or subbie).
  • Public profile: your display handle (by default your first name and last initial), business or trading name, ABN, location, service areas, trades, skills, tickets, availability, rates, crew size, website, and description.
  • Private contact details:your legal name, phone number and email. These are held in a separate table from your public profile and released only in the circumstances listed under “Who can see what”.
  • Photos: a profile photo or logo, and photos of finished work you choose to publish.
  • Verification documents: White Card, trade licence, insurance certificates and tickets, if you upload them. These are stored in a private bucket.
  • Induction pack (optional):if you choose to fill one in — legal name, date of birth, address, emergency contact, superannuation fund and member number, ticket numbers, and PPE sizes.
  • Health information (optional, sensitive): allergies and medical conditions you choose to record in your induction pack. Under Australian Privacy Principle 3.3 this is sensitive information, and we collect it only with your consent — which you give by typing it in. Every health field is optional, you can clear it at any time, and it is disclosed only to a company you have actively shared your pack with. We collect it for one reason: so a first-aider on your site knows before an ambulance is called.
  • Jobs and applications: the roles you post, the applications and crew offers you make, and any notes you attach.
  • Reviews: ratings, written reviews, and replies.
  • Messages: messages you exchange with people you are connected to on the platform.

Information we generate

  • Reputation scores calculated from your reviews.
  • Engagement records— a record that two parties agreed to work together, created when an application is accepted.
  • Unlock records— which companies have paid to see your contact details, and when. You can see that list yourself.
  • Notifications about activity on your account.

What we do not collect

  • No tax file number and no bank account details. There is no field for either anywhere in CrewLink, including the induction pack. Those belong in a payroll system, not in a marketplace.
  • We never see your card number.When a company pays to unlock a worker’s contact details, the payment is handled by our payment provider. CrewLink stores only a reference to the transaction and the amount.
  • We do not handle payment between you and the people you work with. Wages and invoices are arranged directly, off-platform. We never see those.
  • No location tracking, and no access to your contacts or photos.
  • No advertising identifiers, and no third-party ad tracking.

Who can see what

Access is enforced in the database itself, not just in the interface. If a rule below says somebody cannot see something, the query returns nothing — there is no screen to get around.

Anyone on the internet, without an account

  • Open job posts— the role, trade, location, pay, dates and description, plus the posting company’s trading name. These are indexed by search engines on purpose, so people looking for work can find it.
  • Nothing about workers. Worker profiles, photos, reviews, contact details and induction packs are not visible without an account.

Signed-in members

  • Visible: your display handle, account type, location, service areas, trades, skills, tickets, availability, rates, your profile photo, your photos of finished work, your verified badges, and your reputation and published reviews.
  • Your legal name, email and phone are private. They are released only when: you are working together (an engagement exists); they applied to a job you posted; or they have paid to unlock your details. Nobody else can retrieve them, including by querying the database directly.
  • Your business trading name is public if you have one. A company nobody can check up on is not a company anybody should trust, so business identity is never concealed.

Nobody but you, unless you act

  • Verification documents.Only you and a CrewLink moderator can open them — never a company you work for. What is published is the badge, not the document.
  • Your induction pack, including any health information. It goes only to a company you have tapped Share for, only for as long as you allow, and you can take it back at any time. Companies you have not shared with cannot even see that a pack exists.
  • Messages are visible only to the two parties in the conversation.
  • Reviews you write stay hidden from the person you are reviewing until they review you too, or fourteen days pass. Once published, a review cannot be edited or deleted by anyone.
  • Moderators can view reported content, including unpublished reviews and uploaded documents, in order to act on reports.

How we use your information

To operate the marketplace: to let people find each other, to run applications and hiring, to calculate and display reputation, to deliver messages and notifications, and to detect and act on abuse. We do not sell your information, and we do not use it for advertising.

Who we share it with

  • Other users, as described above.
  • Supabase — our database, authentication and file storage provider. Your data is stored in Supabase’s Sydney (ap-southeast-2) region.
  • Vercel — our application hosting provider.
  • Law enforcement, where we are legally required to.

Where your data is stored

Your data is stored in Australia (Sydney). Some request handling may be processed by servers outside Australia by our hosting provider.

How long we keep it

We keep your account data while your account is open. If you delete your account we remove your profile, contact details, messages and the reviews written about you.

Two things deliberately survive. Reviews you wrote about other people remain, with your name detached from them — otherwise anyone could erase honest feedback about themselves by closing and reopening an account. Records that an engagement happened also remain, with identifying details removed. This is what makes the reputation system trustworthy.

Your rights

Under the Australian Privacy Principles you can ask us for a copy of the information we hold about you, ask us to correct it, or ask us to delete your account. Email privacy@crewlink.au and we will respond within 30 days.

If you are unhappy with our response you can complain to the Office of the Australian Information Commissioner at oaic.gov.au.

Security

All traffic is encrypted in transit. Passwords are hashed, never stored in readable form. Access rules are enforced by the database on every request, so the interface cannot accidentally expose data it should not.

Children

CrewLink is for people working in the construction industry and is not intended for anyone under 16.

Changes

If we change this policy we will update the date above and notify you in the app for anything significant.