Privacy policy
What we collect, why, who sees it, and how to get it back. Selling a business means handing over unusually sensitive information, and we would rather over-explain what happens to it.
What we collect
When you create an account: your name, email address, and — if you give one — your phone number and job title. Sign-in is handled by Firebase Authentication; we do not hold your password.
When you value or list a business: its financial statements, revenue and profit figures, staff numbers, customer concentration, supplier and lease details, and whatever else you enter into the Deep Dive Q&A or any other form, or upload as a document. This is commercially sensitive and, for a sole trader, it is also personal information.
When you enquire about a business: your name, contact details, what you told us about yourself as a buyer, and the fact that you enquired about that business.
When you are verified as a buyer: identity documents and the information needed to satisfy anti-money-laundering obligations. This is sensitive and is treated as such.
When you use the site: your IP address, browser and pages visited, which we use to keep the service running, to stop abuse of public forms, and to understand what is used. We do not sell this and we do not build advertising profiles from it.
If you work at a brokerage: your professional profile — headline, biography, specialisms, languages, years in the industry, licences, accreditations and photograph — which is published on your public broker page because that is its purpose. You control what goes in it.
Why we collect it
- to run your account and give you the service you asked for;
- to produce a valuation from figures you supply;
- to market a business you have asked us to market, in the form you approved;
- to connect a buyer with a seller or a broker;
- to meet anti-money-laundering and other legal obligations;
- to keep the platform secure and to investigate misuse;
- to tell you about your own deals.
Who sees it
A listing is anonymised by default. Public pages show a project name, a region and a category — not the business’s name, address or anything that would ordinarily identify it. Detail is released to a buyer only after they sign a non-disclosure agreement, and you can see who has.
Your broker and their firm see the deals they hold a mandate for. A brokerage can see its own firm’s deals; it cannot see another firm’s.
We use service providers to host and run the platform — cloud hosting and databases, authentication, email and calendar integrations, payment and escrow, and AI providers who process text you ask us to process. When a broker asks for a brochure or slide deck, the business’s information memorandum is sent to Gamma, a document-design service, to lay it out. They act on our instructions and may not use your information for their own purposes.
We do not sell your personal information and we do not share it for anyone else’s advertising.
Where it goes
Our infrastructure and some of our providers are outside Australia, including in the United States and the European Union, so your information is stored and processed overseas. We take reasonable steps to see that it is handled consistently with this policy wherever it sits.
How long we keep it
Your account information for as long as you have an account, and for a reasonable period after. Transaction, settlement and identity-verification records for as long as the law requires us to keep them — which for anti-money-laundering purposes is longer than you might expect, and we cannot delete those on request. Everything else we delete or de-identify when we no longer need it.
Your rights
You can ask us for a copy of the personal information we hold about you, ask us to correct it, ask us to delete it, or object to how we use it. Write to legal@bizflip.co and we will respond within a reasonable time and at no charge.
If you are in the United Kingdom or the European Union you also have the right to data portability and the right to complain to your supervisory authority — in the UK, the Information Commissioner’s Office. In Australia, you can complain to the Office of the Australian Information Commissioner. We would rather you came to us first.
Security
Access to a deal is scoped to the people who hold it. Documents are stored with access controls and every grant is recorded. We do not hold your password. No system is perfect, and if a breach ever affects you we will tell you and the regulator as the law requires.
Cookies
We use cookies to keep you signed in and to remember basic preferences. We also use Google Analytics, which sets its own cookies, to measure visits to our marketplace, valuation and account pages. We do not use advertising cookies. You can block cookies in your browser, but sign-in will not work without them.
Children
bizflip is for adults running or buying businesses. It is not for under-18s.
Changes
We will post any change here and update the date above. If a change materially affects how we use information we already hold, we will tell you directly.
See also the terms of use and the disclaimer.