Privacy Policy
How we handle your information — no funny business.
Last updated: 16 September 2026
Who we are
Good Yakka is a trading name of Project Farm Pty Ltd (ABN 18 664 634 039), an Australian platform connecting farmers with seasonal workers. We’re based in Melbourne, Australia. When we say “we”, “us”, or “our” in this policy, we mean Good Yakka.
About this Privacy Policy
This policy explains how we collect, use, share and protect your personal information when you use the Good Yakka website, the web application, platform and related services (together, the platform). It also explains your privacy rights and how to contact us if you have a concern.
We are committed to protecting your privacy, and we handle your personal information in accordance with the Privacy Act 1988 (Cth) (Privacy Act) and the Australian Privacy Principles (APPs). By creating an account or using the platform, you agree to us handling your information in the manner described in this policy.
Definitions
To assist with clarity, the following terms are used in this policy:
- Personal information means information or an opinion about you where you are identified, or reasonably identifiable, such as your name, contact details or profile.
- Sensitive information is a special category of personal information under the Privacy Act. It includes information such as health information and information about your racial or ethnic origin. We only collect sensitive information in the limited circumstances described below.
What we collect
We collect information you give us when you create an account and use our platform. This includes:
- Name, email address and (for workers) contact numbers such as WhatsApp and mobile
- Profile information — your photos, suburb and state, bio, work experience, skills, languages, the certifications you declare (including a police check declaration), availability and transport
- Work eligibility information — your nationality, your visa type and, if you hold a Working Holiday visa, your visa expiry date. We need this information before you can complete a worker profile.
- Job listing details (for farmers)
- Reviews and ratings you leave for, or receive from, others
- Messages sent through the platform
- Payment information (processed securely through our payment provider — we don’t store your card details)
- Map coordinates for the suburb you choose, which we store for distance features but never display
- Push notification subscriptions for any device where you turn notifications on
- If you report a bug, the page you were on, your screen size, app version and browser type, attached automatically
- If you join our farmer waitlist, your email address and where you signed up
We also collect some information automatically when you use the platform, like your IP address, browser type, and how you interact with the site. We use your IP address only briefly, and our analytics and error-monitoring tools are set not to store it. We count unique listing views using a browser cookie (see Cookies).
Some of the information we collect is content that you create on the platform, including your profile and digital CV, job listings, applications, reviews and ratings, and the messages you send through the chat function. So that we can keep the platform safe and fair, we may access, review and store this content in order to operate the platform, moderate content, assist in resolving disputes, and enforce our terms.
If you message a worker through their public profile on our platform and you do not have an account, we will store your name, email address and message and pass them on to the worker.
Sensitive information
If you use the platform as a worker, we ask you to provide your visa type (and, for a Working Holiday visa, its expiry) and your nationality. This information appears on your public profile. Your visa type and expiry help farmers understand what you have declared about your right to work in Australia.
We collect your nationality because it is relevant to the seasonal work you are seeking, including under the Working Holiday Maker and PALM schemes, and because it helps farmers understand the work rights you have declared. Because your nationality may reveal your racial or ethnic origin, it is sensitive information under the Privacy Act. We collect it, and display it on your public profile, only where it is reasonably necessary for these purposes and with your consent. You give that consent when you choose to complete a worker profile. You do not have to provide this information, but you cannot complete a worker profile without it.
You may also choose to state that you hold a police check. Information of this kind may be sensitive information, so we collect it, and show it on your profile, only with your consent, which you give when you choose to include it. We do not verify police checks.
Other than as described above, we do not ask for sensitive information, and we ask that you do not include it in your profile, reviews or messages. If we receive sensitive information in any other way, we use and disclose it only for the purpose for which it was provided, or as permitted, required or authorised by law.
How we collect it
We collect personal information in a number of ways:
- Directly from you, when you sign up, build your profile or digital CV, post a listing, apply for work, leave a review, or send a message.
- Automatically, when you use the platform, as described above.
- From other users, for example when a farmer or worker leaves a review or rating about you.
- From Google, if you choose ‘Continue with Google,’ and from third parties, such as service providers in the course of running the platform.
How we use it
We use your information to:
- Run the platform and connect workers with farmers
- Process payments for job listings
- Show workers the jobs available, and show farmers the workers who apply to their listings
- Send you important updates about your account or applications
- Improve the platform based on how people use it
- Keep the platform safe and prevent fraud, spam and misuse.
- Handle disputes, moderate content, and enforce our terms.
- Meet our legal obligations and maintain proper records.
We will only use your information for the purposes set out in this policy, for related purposes that you would reasonably expect, where you have consented, or where permitted, required or authorised by law.
We won’t sell your personal information to anyone. That’s not how we operate.
Being anonymous, and your choices
Where it is lawful and practicable, you may deal with us anonymously or by using a pseudonym, for example when making a general enquiry. For most functions of the platform, however, we will need to identify you, as it is not practicable to build a profile or to hire a worker anonymously.
If you choose not to provide the information we require, we may be unable to provide you with an account, certain features, or the full functionality of the platform.
Who we share it with
Your profile and digital CV are a public web page. Anyone on the internet with the link can view them — no account needed. Your surname is never shown publicly (only your first name and initial), your contact details appear only if you switch them on, and we ask search engines not to index profile pages. Farm profiles and job listings are public in the same way, farmers see a worker’s application only when the worker applies.
Please remember that your profile, digital CV and reviews are intended to be seen. If you share or export your digital CV away from the platform, for example to social media, you do so at your own discretion, and what happens to it after that is outside our control.
Beyond that, we only share information with:
- Payment processors to handle transactions
- Hosting and infrastructure providers that keep the platform running
- Courts, tribunals, regulators, government bodies and law enforcement, where required or authorised by law
- Our professional advisers, auditors and insurers.
- Our staff and contractors who require access in order to perform their duties.
- Other providers that assist us in operating the platform, such as analytics, error-monitoring and email providers, and other users as described above.
- Any other person to whom you ask or authorise us to disclose it.
Our key providers include, but are not limited to:
- Stripe (payments)
- Google (sign-in)
- Supabase (database, sign-in and file storage, in Sydney)
- Render (our servers, in Singapore and the United States)
- Vercel (website hosting and analytics, United States)
- PostHog (product analytics, United States)
- Sentry (error monitoring, United States)
Sending information overseas
Some of the providers we use may be located overseas, or may store or access information from outside Australia, for example providers of cloud hosting, payment processing, analytics or communications.
Before we disclose your personal information overseas, we take reasonable steps to ensure that the recipient handles it consistently with the APPs, unless an exception applies. We may also disclose information overseas where permitted, required or authorised by law.
The overseas recipients we use are likely to be located in the United States, Singapore, Japan and Germany (and elsewhere in the European Union). Some global services we use — payments, Google sign-in, push notifications, map tiles and the stock photos on our marketing pages — may process information in the United States or elsewhere. Our database and your uploaded photos are stored in Australia.
Marketing and communications
From time to time we will send you messages that are necessary to operate the platform, such as account notices, application updates, security alerts and other service messages. Generally, you cannot opt out of these messages while your account remains active.
We will only send you marketing communications, such as newsletters or tips, where you have consented or where otherwise permitted by law. You may opt out at any time using the unsubscribe facility in the communication, or by contacting us. Opting out of marketing does not affect the service messages described above. We do not sell your information, and we do not use your messages, reviews or CV content for targeted advertising.
How we protect it
We take reasonable steps to keep your information secure. The steps we take include encryption in transit, secure hosting, access controls, and limiting access to your information to those who require it.
No method of storage or transmission is completely secure, and accordingly we cannot guarantee absolute security. If a data breach occurs, we will respond in accordance with our legal obligations. Where the breach is an eligible data breach under the Privacy Act, we will notify the Office of the Australian Information Commissioner (OAIC) and affected individuals as required under the Notifiable Data Breaches scheme.
How long we keep it
We retain your personal information only for as long as we reasonably require it, including to operate the platform, meet our legal obligations, resolve disputes and enforce our agreements.
You may delete your account at any time. When you do, we will delete or anonymise your personal information once we no longer require it, unless we are permitted or required by law to retain some of it. Please note that some information may remain visible to others, such as reviews you have written (shown as ‘Deleted account’), your messages in other people’s chat threads (also shown as ‘Deleted account’), and posts on the feedback board, and that anything you have already shared or exported away from the platform is outside our control.
When you delete your account, your profile and any listings are removed from view immediately, and you then have 30 days to change your mind. After that period, your account, profile, photos, applications and listings are permanently deleted, and reviews about you are removed together with your profile. We keep some information for longer, and where we do, we remove your name and other identifying details where we can. This includes the reviews you have written, your chat messages, your feedback board posts and bug reports, and the record that a job took place. We keep database backups for 7 days. Our analytics information does not include your name or email address, and is deleted after 12 months. Messages sent to a worker through their public profile are kept for 12 months. We keep our marketing list until you unsubscribe or, if earlier, for 24 months after your last engagement with us, and if you unsubscribe, we flag your address so that we do not email you again.
Your rights
You can:
- Access the personal information we hold about you
- Ask us to correct anything that’s wrong
- Ask us to delete your account and personal data
- Opt out of marketing emails at any time
- Ask a question, or make a privacy complaint, about how we handle your information.
If you’re in the EU or UK, you may have additional rights under the EU or UK GDPR (General Data Protection Regulation). If you’re in Australia, your rights are covered under the Australian Privacy Act 1988. Either way, just get in touch and we’ll sort it out.
To access or correct your information, please contact us using the details below. We may need to verify your identity first, and we will respond within a reasonable time, and within any period required by law.
If we are unable to give you access or to make a correction, we will let you know why, unless it would be unreasonable to do so. Where information we hold about you is inaccurate, out of date or misleading, we will take reasonable steps to correct it.
Cookies
We use cookies to keep you logged in, remember your preferences, and understand how people use the platform. You can control cookies through your browser settings.
The cookies and similar technologies we use generally fall into the following categories:
- Essential cookies, which keep you logged in and keep the platform secure.
- Functional cookies, which remember your preferences and settings.
- Analytics cookies, which help us understand how the platform is used so that we can improve it.
You may manage cookies that are not essential through your browser or through any cookie controls we provide. Disabling some cookies may affect how the platform operates.
Aggregated and anonymised information
We may create and use aggregated or anonymised information, for example a count of how many people view a listing, for analytics, security and improvement of the platform. We take reasonable steps to ensure that this information is no longer reasonably identifiable, and we do not attempt to identify individuals from it, except where permitted or required by law.
Other websites and links
The platform may contain links to other websites or services that we do not control, for example a farmer’s own website. We are not responsible for their privacy practices, and we encourage you to review their privacy policies before providing personal information to them.
Users under 18
You must be at least 18 years old to use Good Yakka. We do not knowingly collect personal information from any person under 18. If we become aware that we have done so, we will take reasonable steps to delete that information.
Making a privacy complaint
If you consider that we have mishandled your personal information, or breached the Privacy Act, please contact us using the details below and provide full details of your concern. We will acknowledge your complaint, investigate it, and respond within a reasonable time.
If you are not satisfied with our response, you may contact the Office of the Australian Information Commissioner (OAIC) at www.oaic.gov.au.
Changes to this policy
We might update this policy from time to time. If we make significant changes, we’ll let you know through the platform or by email. Good Yakka will also update the “Last updated” date at the top of this policy so that the date of the most recent change is clear.
Get in touch
If you’ve got questions about your privacy or this policy, reach out.
You may also contact us to request access to, or correction or deletion of, your information, to withdraw your consent, or to make a complaint. Please contact Good Yakka (Project Farm Pty Ltd, ABN 18 664 634 039) at gday@goodyakka.com.au.