Privacy policy | TLK Source

TLK is bound by the Privacy Act 1988 (Cth) and the Australian Privacy Principles. Email hello@tlksource.com.au about anything in this policy.

1. What we collect

From buyers. Name, work email, phone, role, organisation, ABN, the categories you are reviewing, your approximate annual spend band in each, where you operate, when you are looking, what matters to you, how many suppliers you would like to meet, and what you tell us in a meeting or a message.

From suppliers. Name, work email, phone, role, company, ABN, website, the categories you sell, the states you serve, the buyer sizes you serve, your typical contract size, and the evidence behind each check in our standard — licences, insurance certificates and similar.

From visitors. Aggregate page statistics. We use Cloudflare Web Analytics, which does not use cookies and does not follow you between sites. We do not use advertising trackers.

From public and professional sources. We build prospect lists of businesses from published sources, including the Australian Business Register and business websites. That information is about businesses, and the contact details we hold are work contact details published for business purposes. When we first contact someone this way we say where we got their details and how to stop hearing from us.

From businesses claiming a page by hand. Your email address, and one document you upload to show the business is yours (an ASIC extract, an invoice or a bank letter). Only TLK staff see the document, and only to decide the claim.

Technical. IP address and browser details in server logs, kept short-term for security and to stop abuse.

2. Why we collect it

To match buyers with suppliers in the categories they are reviewing.
To check suppliers against our published standard.
To book and run meetings, and to record what happened after them.
To take payment from suppliers and issue tax invoices.
To answer you, and to tell you about things relevant to what you registered for.
To meet our legal and tax obligations.

If you do not give us the information we ask for, we may not be able to match you or book a meeting.

3. What suppliers see about a buyer, and when

This is the part most people want to know, so it is set out step by step.

3.1 Before a supplier pays, they see the buyer's organisation type, size band, region, category and stated needs. They do not see the organisation's name or any individual's name.

3.2 When a supplier the buyer has chosen confirms and pays, they are told the buyer's organisation name. They are not given contact details.

3.3 Contact details are released only if the buyer marks that supplier "Next step" after the meeting. If the buyer does not, they are not released.

3.4 Suppliers agree not to contact a buyer outside TLK unless the buyer chooses "Next step". Breaching that means removal.

4. Automated matching

4.1 We use software to work out which suppliers to tell about a buyer's review. It matches on category, the states each side operates in, the size of buyer a supplier serves, and the buyer's declared spend band. The spend band also sets the fee the supplier pays.

4.2 Software also records the outcome of each check in our published standard, and prevents a supplier seeing what any buyer needs until every check is clear.

4.3 No automated process decides who a buyer meets. The software produces a list of suppliers who match and who have passed our checks. A person at the buyer organisation chooses from that list.

4.4 If you want to know how matching applied to you, or you think it has produced a wrong result, email hello@tlksource.com.au. We will explain what it did and correct anything that is wrong.

5. Who we share it with

We do not sell personal information. We share it with:

The other side of a meeting, in the staged way described in section 3.
Cloudflare, which hosts the site and stores our data. Data is stored in Cloudflare's network and may be processed outside Australia.
Stripe, for supplier payments. Stripe handles card details directly; we never hold them. Stripe processes data outside Australia.
Resend, to send email. Email is processed outside Australia.
The video providers we use to run meetings, for the meeting concerned.
Our advisers and authorities, where the law requires it or to establish or defend a legal claim.

By using TLK you consent to your information being handled by these providers outside Australia. We take reasonable steps to use providers who handle it consistently with the Australian Privacy Principles.

6. Marketing and unsubscribing

6.1 We send two kinds of email: messages about something you are doing with us, and messages telling you about relevant opportunities.

6.2 Every email of the second kind carries an unsubscribe link that works. Unsubscribing stops those emails and does not affect messages about a meeting you have booked.

6.3 We comply with the Spam Act 2003 (Cth): we identify ourselves, we give a working unsubscribe, and we contact business addresses only where there is a proper basis to do so.

7. Cookies

We use a session cookie to keep you signed in. We do not use advertising or tracking cookies, and our analytics does not set cookies.

8. Security

We take reasonable steps to protect information: encrypted connections, sign-in links rather than stored passwords, two-factor authentication on administrative accounts, access limited to what each person needs, and logging of changes. No system is perfectly secure, and we cannot guarantee absolute security.

9. How long we keep it

9.1 Buyer and supplier records are kept while the relationship is active and for seven years afterwards, which is the period tax and business records must be kept.

9.2 Evidence supporting a check is kept while the supplier is registered and for seven years afterwards, so we can show what was checked and when.

9.3 Prospect records are deleted when the person unsubscribes or asks us to, except for the minimum needed to make sure we do not contact them again.

9.4 Server logs are kept for a short period for security purposes.

9.5 A document uploaded to claim a page is deleted as soon as we have decided the claim. We keep a record of the decision, not the document.

10. Access, correction and deletion

10.1 You may ask for a copy of the personal information we hold about you, and ask us to correct it. Email hello@tlksource.com.au. We will respond within thirty days and will not charge you for a reasonable request.

10.2 You may ask us to delete your information. We will, unless we are required to keep it — for example tax records, or evidence behind a check.

11. Complaints

11.1 If you think we have mishandled your information, email hello@tlksource.com.au. Tell us what happened and what you would like done. We will acknowledge within five business days and answer within thirty days.

11.2 If you are not satisfied with our answer, you may complain to the Office of the Australian Information Commissioner at oaic.gov.au or on 1300 363 992.

Changes to this policy

We may change this policy. If a change materially affects you, we will tell you by email or by a notice on the site before it takes effect. The version published here is the one that applies. Continuing to use TLK after a change takes effect means you accept the changed policy.

Governing law

This policy is governed by the laws of New South Wales, Australia. You and we submit to the non-exclusive jurisdiction of the courts of New South Wales.

Contact

Email hello@tlksource.com.au.

TLK Source is a business name of The Lazy Kangaroos, ABN 16 525 180 164. Sydney NSW. hello@tlksource.com.au. Last updated 27 September 2026.