--- title: "Privacy policy — Huon Valley Directory" description: "How Huon Valley Directory and Mafia collect, use, disclose and protect personal information." source: "https://huonvalley.directory/privacy" markdown: "https://huonvalley.directory/privacy.md" --- # Privacy policy Huon Valley Directory Last updated 25 August 2026 This policy explains how Mafia Publishing (ABN 37 709 073 991) handles personal information as the owner and publisher of Huon Valley Directory and operator of the Mafia account console at mafia.net.au. Its address is 252 Annerley Road, Dutton Park QLD 4102. The public masthead uses privacy-safe server-side aggregate measurement. It also offers optional Google Analytics 4 measurement, but the Google tag stays off and sends no data to Google unless you choose “Allow analytics”. We do not use Google Analytics for advertising or ad personalisation. ## What we collect When you read a public masthead, Cloudflare receives the connection information needed to deliver and protect the site. The masthead itself does not set cookies. For eligible human requests, we record aggregate page views, internal listing opens, searches, whether a search returned results, and outbound advertiser-link clicks. A record may include the masthead, listing, page path, whether the listing was paid, country, and whether the visit came directly, from that masthead, from its search, or from an external website. An external source is reduced to its hostname; we do not keep its full referring URL. We do not put your IP address, name, email address, device identifier, cookie identifier or search terms in these analytics records. These counts describe requests and activity, not unique people or proof that content appeared in a person's viewport. Advertisers receive aggregate summaries for their own content and no visitor-level information. If you allow Google Analytics, Google may receive page views, referring source, approximate location derived from your connection, browser and device information, scrolls, outbound clicks, file downloads and internal search activity, including a search term in the page address. Google says GA4 uses IP addresses at collection time to derive location and then discards them before the data is logged. We configure advertising storage, Google signals, advertising user data and ad personalisation off, and do not send names, email addresses or account identifiers to Google. Please do not put personal information into a public masthead search. If you use the Mafia console, we may collect: - your email address and any name or contact details you provide; - your listings, directory details, images, bids and moderation history; - Stripe payment references, amounts, status and transaction dates; - hashed sign-in, session, IP-address and browser information used to authenticate accounts and prevent abuse; and - email delivery records, support messages, commercial-email preferences, consent or other contact-basis evidence, and operational logs; and - Frankie assistant conversations, requested actions, decision records, handoffs and reviewed learning proposals. Card numbers and security codes go directly to Stripe and do not pass through our servers. ## How we collect and use it We collect information from you, from your browser when you use the service, and from service providers such as Stripe when they confirm a payment. For carefully reviewed business outreach, we may also record permission supplied directly by a recipient, an existing relevant business relationship, or the source and relevance of a conspicuously published work address. Publication of an address alone does not automatically make it suitable for marketing. We use information to sign you in, operate and secure the service, review and publish listings, process payments, issue invoices, send service and renewal messages, measure masthead usage, growth, traffic sources, listing opens, searches and advertiser click-throughs, prepare private performance summaries, answer support requests, prepare and audit actions requested through Frankie, and—with a recorded lawful basis and relevance—send offers about Mafia Publishing mastheads. Commercial messages identify the sender and include an easy unsubscribe. Unsubscribe requests, complaints and delivery failures are recorded so further commercial mail can be suppressed. Information placed in a listing is intended for publication. A directory entry may publicly show a business phone number, email address, service area and website. Do not submit personal information that you do not have authority to publish. ## Cookies, analytics choices and bot protection A public masthead stores your analytics choice in your browser's local storage. If you decline or do not choose, the Google tag does not load and Google Analytics cookies are not set. If you allow analytics, GA4 may set first-party cookies named \_ga and \_ga\_\* for up to six months. Use “Analytics settings” in the footer to change your choice; declining removes those cookies and stops the tag loading on later pages. The Mafia console uses essential, secure cookies to keep an account signed in and to complete passwordless login. Its sign-in page may use Cloudflare Turnstile to distinguish people from automated abuse. These features are necessary to provide and protect the account service; they are not used by us for advertising. ## Who we disclose information to We disclose only what is reasonably needed to providers that help run the service: - **Cloudflare** for hosting, storage, security and Turnstile; - **Google Analytics**, only after consent, for website measurement and aggregate reporting; - **Stripe** for payment processing; and - **Resend** for transactional and individually approved commercial email. We may also disclose information where required by law, or where reasonably necessary to investigate fraud, abuse or a threat to safety. We do not sell personal information. These providers operate internationally. Personal information may be disclosed to or processed by recipients outside Australia, including in the United States. Their practices are described in the [Cloudflare privacy policy](), [Google privacy policy](), [Stripe privacy policy]() and [Resend privacy policy](). ## Storage, security and retention We use access controls, restricted service credentials, secure cookies and cryptographic hashing for sign-in codes and session identifiers. No internet service can promise absolute security. We keep personal information only for as long as it is needed for the purposes above or required by law. Financial and transaction records may be retained after an account closes. Suppression records may be kept so we can continue respecting a request not to receive commercial email. Expired sign-in and session records are removed as part of routine housekeeping. Google Analytics user-level and event-level data is kept according to each property's configured retention period; aggregate reports may remain available for longer. You can withdraw consent at any time as described above, or contact us about an analytics data-deletion request. ## Access, correction and deletion Email [frankie@huonvalley.directory]() to ask what personal information we hold about you, request a correction, close an account or request deletion. We may need to verify your identity first, and may retain records that the law requires us to keep. Archiving a listing removes it from the generated masthead after the next publish. Copies may remain temporarily in caches, search indexes or independent web archives. ## Privacy complaints Send a complaint to [frankie@huonvalley.directory]() with enough detail for us to investigate. We will acknowledge it and respond within a reasonable time. If you are not satisfied, you may contact the Office of the Australian Information Commissioner at [oaic.gov.au](). You can also write to Mafia Publishing (ABN 37 709 073 991), 252 Annerley Road, Dutton Park QLD 4102. ## Changes to this policy We will update the date above when this policy changes. If a change materially affects advertisers, we will also notify affected account holders where reasonably practicable.