Privacy policy
How Verdue handles personal information, under the Privacy Act 1988 (Cth) and the Australian Privacy Principles.
Verdure Pty Ltd · Draft of 26 July 2026 · Not yet in force
Who we are
Verdue is operated by Verdure Pty Ltd (ABN [ABN]), [ADDRESS], Queensland, Australia. Contact: [PRIVACY EMAIL].
Who this applies to
Three groups, with different relationships to us:
- Councils and other asset owners — the customer that subscribes to Verdue.
- Contractors — the businesses that supply proof-of-service records for work performed under contract to the council.
- Operators — the people who did the work and who are identified in those records. They are usually employees or subcontractors of a contractor, not of the council.
What we collect
From councils: council name, contact details, billing information (payment card details are handled by our payment processor and are not stored by us), site and asset data including names, boundaries, categories and addresses, and issue and complaint records.
From contractors, supplied by their software: proof-of-service records, including operator identifiers, positions and their accuracy, times, service types, durations, photographs, notes and exception reports.
We do not collect location directly. Verdue does not run on an operator’s device and records no position itself. Positions reach Verdue only inside proof-of-service records that a contractor’s software submits for a completed job.
Information supplied by contractors
Most personal information in Verdue is supplied by contractors about their own operators, as part of evidencing work performed under a contract with the council. The contractor is responsible for informing their operators that these records are supplied. Councils should ensure their contracts require this.
Records may identify operators by a reference rather than a name where the contract does not require names. Verdue does not require operator names to function.
Why we collect it
To evidence that contracted work was performed; to produce the compliance reports a council relies on for contract administration, insurance and legal purposes; to operate the product; and to meet record-keeping obligations councils have.
Who can see it
- The council can see the records supplied for its own sites and contracts. That is the purpose of the product.
- The contractor can see the records it supplied.
- We access customer data only to operate, support and secure the service.
- Service providers — hosting, storage, email and payments — under contract, only as needed. Listed at [SECURITY PAGE URL].
- Nobody else, unless required by law.
We do not sell personal information, and we do not use it for advertising.
Where it is stored
Australia, on Amazon Web Services infrastructure in the Sydney region (ap-southeast-2). Some service providers may process limited information overseas; where they do, they are listed at [SECURITY PAGE URL].
How long we keep it
- Proof-of-service records, photographs and reports — councils retain these for contract administration, audit and legal purposes, typically for longer than a contractor would. The default retention period is [DEFAULT RETENTION PERIOD], and it is configurable per council.
- Diagnostic logs — [PERIOD].
- On account closure, data is deleted or de-identified within [PERIOD] of a written request, subject to legal retention obligations.
Your rights
Any individual may ask what we hold about them, ask us to correct it, or complain about how we have handled it. Contact [PRIVACY EMAIL].
If you are an operator: the information about you in Verdue was supplied by the contractor you work for, and what is recorded is set by the contract between that contractor and the council. We will help, and will usually direct requests to the contractor as the party that created the record.
If you are not satisfied with our response you may complain to the Office of the Australian Information Commissioner at oaic.gov.au.
Our commitments about location
Because location is the most sensitive thing a proof-of-service record contains, we commit to these plainly:
- Verdue records no location of its own. Positions arrive only within a submitted job record, captured by the contractor’s software between check-in and check-out on that job.
- We do not build operator or contractor league tables, rankings, grades or productivity scores from this data, and we do not provide them to councils. Verdue reports factual counts and rates with the sample size beside them, and states nothing at all where the sample is too small to support it.
- A council remains free to define its own measure of contractor performance. That is the council’s judgement, made with knowledge of contract context and site difficulty, and it is not one this software makes on its behalf.
These are product commitments, not just policy statements. They are described further at [TRUST PAGE URL].
Security
Described at [SECURITY PAGE URL]. If you believe your data has been compromised, contact [SECURITY EMAIL].
Changes
We will post changes here and update the date. Material changes will be notified to customers by email.