Partner accounts and client quotes
Partner sign-in uses short-lived email codes and a secure session cookie. We store account details, hashed authentication tokens, client names and email addresses provided for quotes, service descriptions, approved prices, deposits and payment records. Partners can access their own quote records; the Black Oak owner can access all records to approve pricing and deliver services. Private quote links should be shared only with intended recipients.
This operational policy should be reviewed against your registered business details and applicable Australian privacy obligations before live launch.
Information we collect
We collect information you choose to provide, such as your name, email, company, project message, referral registration and acceptance of referral terms. For referral integrity, we store a generated partner code, Stripe connected-account identifier, verification status and hashed customer email. We do not receive or store card numbers, passwords, identity documents or bank details.
Payments and payouts
Stripe processes customer payments and referral-partner identity and bank information under Stripe’s own privacy terms. Black Oak receives transaction status, amount, package, limited customer contact details and identifiers needed to reconcile payments, prevent self-referrals and handle refunds, disputes and partner rewards.
How we use information
- Respond to enquiries and deliver purchased services.
- Verify referral ownership, attribute eligible sales and process rewards.
- Prevent fraud, self-referrals, duplicate rewards and payment abuse.
- Meet accounting, tax, dispute and legal obligations.
- Maintain the security and reliability of the website.
Service providers and overseas processing
The site uses Netlify for hosting and server functions, Stripe for payments and connected payouts, and Resend for transactional email. These providers may process data outside Australia under their own safeguards and terms.
Retention and security
We retain records only as long as reasonably required for service delivery, referral administration, fraud prevention and legal obligations. Access is limited through private service credentials. No internet system is risk-free, so report suspected misuse promptly through the contact page.
Your choices
You may request access to or correction of personal information, ask a privacy question, or request deletion where retention is not legally required. Use the secure contact form and identify the email used for your enquiry or referral profile.
Changes
We may update this policy when the website, referral program or service providers change. The date above shows the latest published version.