Privacy policy


Customer Reviews Pty Ltd trading as Kundello (ABN: 42 620 966 663) (“CRPL”) respects your privacy and is committed to protecting your personal information. Our Privacy Policy outlines our approach to privacy and how we collect, use and protect your personal information. It also sets out your rights in relation to accessing the personal information we collect and hold about you.

In this policy, “we”, “our”, “us”, “CRPL”, “Kundello” and “Site” refer to (“Site”) and any CRPL software or web-based application. Please note that CRPL may change all or part of this Privacy Policy at any time. If CRPL does so, the new Privacy Policy will be posted on this Site and will be effective as soon as it is posted. For future use of this Site or the Platform, or in respect of future provision of the Services, this Privacy Policy may therefore be different. CRPL recommends that you read this Privacy Policy carefully each time you access the Site or the Platform or use CRPL’s Services.

Personal information

Personal information means information or an opinion about an identified individual, or an individual who is reasonably identifiable.

CRPL employs strict policies and security measures to protect the personal information you or a third-party provide us. When you register with us, use the Site or the Platform, or provide us with your personal information, you give us consent to process and use such submitted personal data in accordance with this Privacy Policy. This Privacy Policy applies to all protected personal information collected, maintained or used by us.

Collection of information

CRPL only collects personal information for the purposes of conducting our business.

We will collect personal information from or about you by lawful and fair means and not in an unreasonably intrusive way. When you visit our Site, we, and/or third parties, may place cookies on your browser to enhance and manage our website and improve our business and the services we provide to you. We and/or Google may use this information to optimise and place advertisements, including advertisements of third-party vendors, on our own and third-party websites. Google’s ability to use and share information collected by Google Analytics is restricted by the Google Analytics Terms of Use and Privacy Policy.

We collect information in three ways:

1. Information you give to CRPL directly. This includes:

  • with respect to registered businesses: this might include your name, business name and ABN, email address, billing information or any other information required to list and register your business on CRPL’s Site or Platform.
  • information about users: this might include your name, email address, first name, surname and address, and may also include photographs that you provide to us, your username or any other information required to list and register on CRPL’s Site or Platform;
  • information about your financial transactions: if you use CRPL’s Services for financial transactions, we collect information about the transaction. This includes your payment information, such as your bank account details, credit or debit card number and other card information, and other account and authentication information, as well as billing, shipping and contact details.

2. Information we collect through your use of CRPL’s services. This includes:

  • information collected by our server, including the internet protocol (IP) address used to connect your computer to the internet, operating system and platform, the average time you spend on CRPL’s Site and/or Platform, pages visited, information searched for, average access time, and websites you have visited previously, as well as other relevant statistics;
  • cookies and other anonymous identifiers, which we send to your computer’s browser for record-keeping purposes;
  • information from or about the computers, phones, or other devices where you install or access CRPL’s services. We may associate the information we collect from your different devices, which helps us provide consistent services across your devices. This might include:

 - attributes such as the operating system, hardware version, device settings, file and software names and types, battery and signal strength, and device identifiers;
 - device locations, including specific geographic locations, such as through GPS, Bluetooth, or WiFi signals;
 - connection information such as the name of your mobile operator or ISP, browser type, language and time zone, mobile phone number and IP address.

3. Information from third-parties. We receive information about you and your activities from third-parties including registered businesses, information provided to us by other product or services providers, or information from other users about your experiences or interactions with them.

Children's Information

Another part of our priority is adding protection for children while using the internet.We encourage parents and guardians to observe, participate in, and/or monitor and guide their online activity.

CRPL does not knowingly collect any Personal Identifiable Information from children under the age of 13. If you think that your child provided this kind of information on our website, we strongly encourage you to contact us immediately and we will do our best efforts to promptly remove such information from our records. If we become aware that we have collected Personal Data from children without verification of parental consent, we take steps to remove that information from our servers.

How CRPL uses your information

We will generally use or disclose your personal information only for the primary purpose for which it was collected; or for a related secondary purpose where you would reasonably expect us to use or disclose the personal information for that secondary purpose. We may otherwise use and disclose your personal information if you have given us consent for the use or disclosure or it is required or authorised by law.

If those purposes for which we have collected the information involve providing personal information about an individual to any third-party, we will take appropriate and reasonable steps to ensure any personal information is protected. We will not identify users or their browsing activities, except where required by law or in accordance with our terms of use.

We will generally only use personal information for marketing if you have given express or implied consent or it is impracticable to seek consent before this use.

Without limiting the above, CRPL may use, or disclose to third-parties, the information you give to CRPL directly and the information we receive from third-parties in order to:
 - in circumstances where a registered business has provided us with your personal information (either directly or via code), we may contact you on behalf of that registered business to provide a review of the registered business;
 - deliver products or services to you, or to others, to collect payments, make payments and to manage your account, to market to you directly, as well as provide you with information about our products and services, and to notify you of changes to our products and services;
 - contact you about new products, projects or services. You may opt-out of receiving these direct marketing communications at any time. Our electronic marketing activities will comply with the requirements of the Spam Act 2003 (Cth);
 - provide, maintain, protect and improve our services for your benefit, or for the benefit of others, to develop new services, and to protect our services and our customers. We may also use this information to offer you, or others, tailored services, products, projects or seasonal promotions;
 - keep a record of your communications with us to help solve any issues or disputes that might arise;
 - help verify accounts and activity, and to promote safety and security on and off of our services, such as by investigating suspicious activity or violations of our terms or policies;
 - comply with the law, legal process, litigation, and/or requests from public and governmental authorities within or outside your country of residence. We may also disclose information about you if we determine that for purposes of national security, law enforcement, or other issues of public importance, disclosure is necessary or appropriate;
 - to send you service, support and administrative messages, reminders, technical notices, updates, security alerts, and information requested by you; or
 - to send you marketing and promotional messages and other information that may be of interest to you, including information sent by, or on behalf of, our business partners that we think you may find interesting.

We may use the information we collect through your use of our services to:
 - measure the use of CRPL’s Site and Platform and to administer and improve CRPL’s Service. We interpret this statistical data in our continuing effort to improve CRPL and your user experience; and
 - gather information on which web pages are visited and how often, to make CRPL’s Site and Platform more user-friendly, and to give you a better experience when you return to CRPL’s Site and Platform.

We may combine the information you give to us directly with the information we collect through your use of CRPL’s Service.

We may from time to time supply the owners or operators of third-party websites from which it is possible to link to CRPL’s Site or Platform with information relating to the users accessing CRPL’s Site or Platform from such third-party websites.

In delivering our products or collecting and using your personal information, we may be required to disclose some of your personal information to third-party organisations, including external service providers; our legal, accounting, financial or other professional advisors; and regulatory or government authorities as required by law.


CRPL takes steps to protect the personal information we hold against loss, unauthorised access, use, modification or disclosure and against other misuse. When no longer required, personal information is destroyed in a secure manner or deleted.

Contact us

Under the Privacy Act 1988 (Cth), you have certain rights to access the personal information we collect and hold about you. Generally, we will allow an individual access to the personal information we hold about them within a reasonable time after it is requested. When requesting such access please identify the precise type(s) of information requested. You may make a request by emailing us at

We take those steps reasonable in the circumstances to ensure that the personal information that we collect, use and disclose is accurate, up to date and complete. Where an individual asks to correct information, we will take reasonable steps to correct the information, having regard to the purpose for which it is held. You may lodge a request to correct personal information by emailing us at

To make a complaint about a breach of the Australian Privacy Principles, which includes how we handle your personal information, you may email or write to us at the email address provided above. We will endeavour to respond to your complaint within a reasonable time after it is received. If you are not satisfied by our response, you may acquire further information regarding privacy from the Office of the Australian Information Commissioner.

General Data Protection Regulation (GDPR)

CRPL is committed to ensuring that the collection and processing of your data, carried out from the Site, complies with the General Data Protection Regulation (GDPR). Each form or teleservice limits the collection of personal data to what is strictly necessary (minimisation of data) and specifies:
(a) what are the objectives of the data collection;
(b) if this data is mandatory or optional for the management of your request; and
(c) who will have access to it (only CRPL unless specified in the form when transmission to a third-party is necessary to manage your request).

The personal data collected as part of the services offered on the Site are processed according to secure protocols and enable CRPL to handle requests received in its computer applications.

CRPL will retain your personal information only for as long as is necessary for the purposes set out in this Privacy Policy. We will retain and use your information to the extent necessary to comply with our legal obligations, resolve disputes, and enforce our policies.

If you are a resident of the European Economic Area (EEA), you have certain data protection rights. If you wish to be informed what Personal Information we hold about you and if you want it to be removed from our systems, please contact us.

In certain circumstances, you have the following data protection rights:

 - The right to access, update or to delete the information we have on you.
 - The right of rectification.
 - The right to object.
 - The right of restriction.
 - The right to data portability.
 - The right to withdraw consent.

Please note that we may ask you to verify your identity before responding to such requests.

For any information or to exercise your rights concerning the processing of personal data managed by CRPL, you can contact CRPL and if appropriate its data protection officer, if distinguished. You also have the right to complain to a Data Protection Authority about our collection and use of your Personal Data. To obtain more information, please contact your local data protection authority in the European Economic Area (EEA).

Privacy Policy last updated on the 6th of February 2020.