Freight Astro

Legal

Privacy Policy

Last updated 23 June 2026

This policy explains what Freight Astro collects, why, who we share it with, and the rights you have. Most of what we process is business and company information drawn from public sources, not information about private individuals.

01Who we are

Freight Astro operates the marketing website at freightastro.com and the closed, invite-only platform at app.freightastro.com. Freight Astro is an intelligence system that identifies and ranks Australian companies most likely to ship freight, built for B2B sales teams.

For the Australian Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs), and where the GDPR applies, Freight Astro is the entity responsible for the personal information described here. When we process information inside the platform on behalf of a client, that client is responsible for how it directs us, and our handling is also governed by our agreement with them. See our Data Protection page for how that works.

For any privacy question or request, contact [email protected].

02What information we collect

Most of what Freight Astro processes is business and company information. We collect:

  • Website information: IP address, browser and device type, pages viewed, and referring page, mostly through privacy-first analytics and server logs.
  • Contact and enquiry information: your name, work email, company, role, and the content of your message.
  • Account information: name, work email, company, role, and authentication identifiers for platform users.
  • Business and company data in the platform: company names, ABNs, domains, industry and trade signals, public registrations, and limited business-contact details.
  • Suppression lists: identifiers a client gives us so we exclude certain companies, such as ABNs, domains, and company names.
  • Communications: support requests, survey responses, and other messages you send us.

We do not seek to collect sensitive information as defined by the Privacy Act, and we ask that you do not send it to us.

03Where the information comes from

Freight Astro is built on public-source-first data. We collect from:

  • Public registers and directories, such as the TGA ARTG, ABF Trusted Trader listings, trade directories, ACCC product recalls, APVMA records, export awards, and public job advertisements.
  • Companies' own public websites, through a freight-evidence crawler that reads pages a company has published publicly.
  • Licensed and key-gated feeds, including an ABR entity resolver, a licensed job-advertisement feed, and a commercial trade-data contract, used under the terms of those licences.
  • Directly from you, when you contact us, request access, or use the platform.
  • Automatically, through analytics and server logs as you use the website.

What we do not use matters too. Freight Astro does not use leaked or private carrier customer data, does not scrape behind paid logins, does not touch confidential ABF or Integrated Cargo System (ICS) data, and does not use dark-web datasets. Where any carrier intelligence informs benchmarks, it is anonymised and aggregated into cohorts of at least five, and is never identified customer data.

04Why we use it and our lawful basis

We use the information above to operate the website and respond to enquiries, provide and secure the platform, identify and rank Australian companies likely to ship freight with provenance on each signal, apply client suppression lists, improve the service and data quality, send service and permitted marketing communications, prevent fraud and abuse, and meet our legal obligations.

Under the APPs we collect and use information for these related business purposes, and only use it for a secondary purpose where you would reasonably expect it or the law allows. Where the GDPR applies, our lawful bases are performance of a contract, legitimate interests (running and improving a B2B sales-intelligence service and security), consent where required for marketing, and legal obligation.

05How we share information

We do not sell personal information. We share it only as follows:

  • Clients: ranked company intelligence is made available to the client it was prepared for, within their account.
  • Service providers and sub-processors: hosting, database, analytics, authentication, and email providers, under contracts that require appropriate protection.
  • Legal and safety: where required by law or legal process, or to protect rights, safety, or the integrity of the service.
  • Business transfers: in connection with a merger, acquisition, financing, or sale of assets, subject to confidentiality protections.

06Cookies and tracking

The marketing site uses only strictly necessary cookies set by our hosting and security providers to keep the site working and protected, for example bot protection on forms. We do not use advertising cookies or cross-site tracking on the marketing site.

To understand how the site is used we rely on privacy-first analytics that do not set tracking cookies, do not fingerprint you, and report only aggregate, non-identifying figures. You can control or block cookies through your browser settings. The platform uses cookies that are necessary to keep you signed in and your session secure.

07Overseas transfers

We may store and process information in countries other than Australia, including through overseas service providers. Before disclosing personal information to an overseas recipient we take reasonable steps to ensure it is handled consistently with the APPs, and where the GDPR applies we rely on an appropriate transfer mechanism such as Standard Contractual Clauses or transfers to countries recognised as adequate. Our Data Protection page lists where our main sub-processors operate.

08How long we keep it

We keep information only for as long as it is needed for the purposes in this policy, including providing the service, meeting legal and tax obligations, resolving disputes, and enforcing our agreements. Public-source company signals are refreshed and re-checked over time, and stale signals are aged out or removed. Suppression-list entries are kept for as long as the client relationship requires so that exclusions stay in force. When information is no longer needed we delete or de-identify it.

09How we protect it

We use technical and organisational measures designed to protect information, including encryption in transit and at rest, scoped and authenticated access to production systems, access logging, network controls, monitoring, and regular security updates. A PII guard runs at the boundary of our benchmarking so identified individual data cannot leak into aggregated outputs. No method of transmission or storage is completely secure, so while we work to protect information we cannot guarantee absolute security.

10Your rights

Depending on where you are, you may have rights to access the personal information we hold, correct information that is inaccurate or out of date, ask us to delete it in certain circumstances, restrict or object to certain processing including direct marketing, receive certain information in a portable format, and withdraw consent where we rely on it.

Because much of what we process is company information from public records, a request about a specific company signal can usually be handled as a correction, suppression, or removal of that signal. To exercise a right, contact [email protected]. We will respond within the time required by law and may need to verify your identity first.

11Children

Freight Astro is a business service and is not directed to children. We do not knowingly collect personal information from anyone under 16. If you believe a child has given us personal information, contact us and we will take appropriate steps to delete it.

12Changes, contact, and complaints

We may update this policy from time to time. We will post the updated version with a new "last updated" date and, where changes are material, take additional steps to notify you as required by law.

For any privacy question, request, or concern, contact [email protected]. If you are not satisfied with our response you can complain to the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au. If you are in the EEA or UK you may complain to your local supervisory authority. If you are a California resident you have rights under the CCPA/CPRA, including to know, delete, correct, and opt out of any sale or sharing of personal information, noting that we do not sell personal information.

Questions? Email [email protected].