Effective 19 September 2026
Connado is operated by Intrepid Projects Pty Ltd (ABN 17 647 285 023), referred to in this policy as Connado, we, us or our. Our postal address is PO Box 642, Dubbo NSW 2830.
We handle personal information in accordance with applicable Australian privacy laws, including the Privacy Act 1988 (Cth) and Australian Privacy Principles where they apply. We use the Australian Privacy Principles as our operational baseline even where a particular obligation may not apply.
What this policy covers
This policy covers connado.com, the Connado web application, customer portals, public tracking and invoice pages, notification preference pages, and the Connado field application for drivers, depot staff and transport partners.
Our business customers control much of the freight, recipient and workforce information entered into Connado. If your information was entered by a freight operator, you should usually contact that operator first. We will assist them with requests concerning information they control.
Information we collect
- Enquiries and communications: your name, work email, telephone number, business, freight volumes, interests and the information you choose to include in a demo or support request.
- Accounts and organisations: identity, authentication details, contact information, organisation membership, roles, permissions and account activity.
- Freight and customer records: consignments, references, sender and receiver contacts, addresses, freight items, routes, instructions, charges and customer-account information.
- Operational evidence: barcode scans, timestamps, foreground location associated with pickups, deliveries and scans, proof-of-delivery names and signatures, and delivery or failed-delivery photos and notes.
- Finance and integrations: invoices, credits, payment status, billing contacts, accounting identifiers and records exchanged with integrations selected by a customer. Payment providers handle payment credentials; Connado does not need to store complete card details.
- Technical and usage information: device, browser, network, diagnostic, security and application-usage data reasonably needed to operate, protect and improve the service.
How we collect information
We collect information directly from people who contact us or use Connado, from the organisation that provides their account or freight work, from recipients and customers using public or portal services, from a device when a user grants permission, and from services a customer chooses to connect.
The field application requests foreground location only while relevant work is being performed. It may use the camera for barcode scanning and delivery photos, and the photo library for images a user chooses to attach. It does not request background location or microphone access.
Why we use information
- Provide, secure, administer and support Connado.
- Route, scan, track, deliver, invoice and report on freight for our business customers.
- Authenticate users, enforce organisation permissions and investigate misuse.
- Respond to enquiries, arrange demonstrations and manage customer relationships.
- Send operational notifications and communications selected by customers or recipients.
- Process subscriptions, integrate selected services and meet accounting or legal obligations.
- Understand website and product performance and improve our services.
We do not sell personal information. We do not use demo-form contents for website analytics.
Website analytics and enquiry attribution
We use a separate PostHog project for anonymous website analytics. It is configured in cookieless mode without person profiles, automatic element capture, session replay, heatmaps, surveys, advertising profiles or identification. We record page activity and a limited set of actions such as opening or submitting the demo form and viewing a pricing estimate.
Analytics URLs are stripped of fragments and query parameters other than standard UTM campaign fields. We do not send names, email addresses, telephone numbers, company names, messages or raw form values to PostHog. PostHog may use network information transiently to produce a privacy-preserving cookieless hash; our project is configured not to retain IP address data.
For a demo enquiry, this website stores the first landing path, standard UTM campaign fields and a sanitised external referrer in session storage. This information expires with the browser session or is cleared after a successful submission. It is included in the CRM record so we can understand how the enquiry reached us.
Who receives information
We disclose information only as reasonably necessary to operate Connado, follow customer instructions, protect users or comply with law. Recipients may include:
- Cloud hosting, database, authentication, email, analytics, customer-relationship, support and application-distribution providers, including Vercel, Convex, Clerk, Resend, PostHog, Less Annoying CRM and Expo.
- Payment, accounting, address and mapping services selected or required for a feature, including Stripe, Xero, AddressFinder and TomTom.
- Professional advisers, insurers, regulators, courts and law-enforcement bodies where appropriate.
- A successor or prospective successor in a properly controlled business transaction.
A business customer may also direct Connado to share freight information with its customers, recipients, drivers, depots, transport partners and connected services.
Overseas processing
Some providers operate or support services outside Australia. Information may be processed in the United States, New Zealand, the European Union, the United Kingdom and other locations used by a provider or selected integration. We assess providers and use contractual, security and access controls appropriate to the information and service. You can contact us for current information about material providers relevant to your use of Connado.
Security
We use technical and organisational safeguards appropriate to the information we handle, including access controls, organisation separation, authenticated and signed access paths, encrypted network connections, provider security controls, monitoring and restricted operational access. No online service can promise absolute security.
If a data incident is likely to cause serious harm and applicable law requires notification, we will investigate and notify affected people and the Office of the Australian Information Commissioner as required.
Retention and deletion
We retain information only for as long as it is reasonably required to provide and secure the service, meet customer instructions, resolve disputes, maintain business and tax records, and comply with legal obligations. Retention varies by record type and customer agreement. Information may remain in protected backups until those backups are overwritten through their normal cycle.
When an account or customer relationship ends, we delete or de-identify information when it is no longer required, subject to contractual, security, backup and legal requirements.
Access, correction and complaints
You may ask to access or correct personal information we hold about you, request deletion where available, or complain about our handling of personal information. We may need to verify your identity and may direct a request to the business customer that controls the relevant freight or workforce record.
Contact Nathan Laing, Privacy Officer, at privacy@connado.com or PO Box 642, Dubbo NSW 2830. We will acknowledge and investigate privacy complaints and respond within a reasonable period or the period required by applicable law. If you are not satisfied, you may contact the Office of the Australian Information Commissioner.
Direct marketing
We may contact business representatives about Connado where permitted by law. Marketing messages will identify us and provide a straightforward way to unsubscribe. Operational freight, billing, security and account messages are not marketing, although recipients can manage supported notification preferences.
Children
Connado is a business service and is not directed to children. If you believe a child has provided personal information without appropriate authority, contact our Privacy Officer.
Changes to this policy
We may update this policy when our services, providers or legal obligations change. We will publish the updated policy here and change the effective date. Material changes may also be communicated through the service or directly to customers.
See also our Website Terms.