Privacy Policy
Last updated: 1 October 2026 · Version 3.1
You can read all of Refer Labs without giving us any personal information. We only collect details you choose to send us, such as an email address for the newsletter or an enquiry form, plus basic site usage. We do not sell personal information. This policy explains what we collect, why, who handles it, and your rights under the Privacy Act 1988 (Cth) and the Australian Privacy Principles.
Who we are
Pepform Pty Ltd trading as Refer Labs · ABN 32 660 008 159 · Melbourne, Victoria
Privacy contact: jarred@referlabs.com.au
1. What we collect
Information you give us
- Newsletter and guide sign-ups: your email address and the page or quiz you signed up from. We do not store your quiz answers, and our health quizzes do not send us your result.
- Home battery enquiries: your name, email, phone number, postcode, timeframe and any notes you add, with your consent to pass them to the installer (see section 3).
- Software quiz: your email, the goals you selected, the tools suggested, and your business name if you give it.
- Partner applications: the contact name, business name, website, email and description a business submits.
- The site assistant: what you type into it, and your first name and email if you choose to continue a conversation by email. Please do not type health or other sensitive information into it.
- Emails you send us, and anything you include in them.
Information collected when you use the site
- Server logs: your IP address, browser and the pages requested, kept by our hosting provider to deliver and secure the site.
- Cookieless analytics: aggregate page views and site performance (Vercel Analytics). This sets no cookies and does not identify you.
- Google Analytics: only if you allow analytics cookies in the cookie banner (section 7).
- Affiliate link clicks: when you follow a partner link, the link records that the visit came from Refer Labs and which page it came from, so a referral can be credited. We do not pass your name or email.
We do not ask for health information. Our health quizzes show their results on the page and do not send your answers or result to us. If you sign up from a health page, we record that page, which may show a health topic you are interested in. We use it only to send you relevant emails, never share it, and delete it with your subscription.
2. How we use it
- To send the newsletter or guide you asked for.
- To reply to your enquiry and, where you consent, introduce you to the provider you asked about.
- To assess partner applications.
- To understand which pages are useful and fix problems with the site.
- To keep the site secure and prevent spam and misuse.
- To meet our legal, tax and accounting obligations.
We do not sell your personal information or share it for anyone else's marketing.
3. Enquiries we pass to providers
Home batteries. If you register interest through our home battery pages, and consent on the form, we send your enquiry to Apollo Energy Group so they can contact you and prepare a quote. Refer Labs and Apollo Energy Group may contact you about that enquiry by phone, email or SMS. We record the consent wording you agreed to, with the date, as proof of consent. If Apollo Energy Group takes on work from your enquiry, they may pay us a referral fee; it does not change the price you are offered. Once passed on, Apollo Energy Group handles your details under its own privacy policy.
Business finance (closed). Our business finance enquiry form closed in August 2026. For enquiries submitted before then, we shared your details only with the lenders and finance brokers you consented to, and we recorded that consent. Refer Labs is a referrer, not a lender, and does not provide credit assistance. You can still ask us to access, correct or delete one of these enquiries.
4. Who handles your information for us
We use these service providers to run the site. Each processes information only to provide its service to us.
Supabase (database)
- What: Newsletter and guide sign-ups, enquiry and partner application records, and staff sign-in
- Why: Storing what you send us so it is not lost
- Where: Hosted on Amazon Web Services; may be outside Australia
- Their policy: supabase.com/privacy
Resend (email)
- What: Your email address and the emails we send you, including enquiry notifications to our own inbox
- Why: Delivering the newsletter, guides and replies
- Where: United States
- Their policy: resend.com/legal/privacy-policy
OpenAI (site assistant)
- What: Messages you type into the assistant, and its replies
- Why: Generating the assistant's answers
- Where: United States
- Their policy: openai.com/policies/privacy-policy
Vercel (hosting and cookieless analytics)
- What: Server request logs, including IP address, and aggregate page views
- Why: Delivering and securing the site, and counting visits
- Where: Global network, including the United States
- Their policy: vercel.com/legal/privacy-policy
Google (Analytics, only with your consent)
- What: Pages viewed, approximate location, device and browser, and clicks on partner links
- Why: Aggregate reporting on which pages are useful
- Where: United States and global
- Their policy: policies.google.com/privacy
Affiliate networks and partners
- What: That a click came from Refer Labs, and the page it came from
- Why: Crediting a referral so the provider can pay a commission
- Where: Australia and overseas, depending on the network
We may also disclose information where the law requires it, or to protect our rights or someone's safety.
5. Information stored overseas
Some of these providers store or process information outside Australia, mainly in the United States. We choose established providers and take reasonable steps, as the Australian Privacy Principles require, to make sure overseas recipients handle personal information consistently with those principles.
6. How long we keep it
- Newsletter: until you unsubscribe. We then keep your address on a suppression list so we do not email you again.
- Enquiries and applications: for as long as needed to handle them and any resulting referral fee, then deleted. Ask us and we will delete yours sooner where the law allows.
- Business and tax records: for the periods Australian law requires, usually seven years.
- Server logs: for the period our hosting provider retains them.
7. Cookies and similar technology
- Your cookie choice is stored in your browser's local storage so we remember it. Change it any time with the Cookie Preferences link in the footer.
- Analytics cookies (Google Analytics) are off by default and only set if you choose “Accept all” or switch analytics on. Until then, Google Consent Mode keeps analytics storage denied.
- Other local storage: a note that you have subscribed, so the sign-up prompt stops appearing, and a note for the current browser session of whether you arrived from an AI assistant, used only for the consented analytics above. Neither identifies you or leaves your device.
- Vercel Analytics is cookieless and runs without a consent prompt because it stores nothing on your device and does not identify you.
- Staff sign-in cookies are set only for Refer Labs staff who sign in.
- Affiliate network cookies are set on the network's or provider's own website after you follow a partner link, under their policies, not ours.
- We do not use advertising or marketing cookies. If that ever changes, we will ask for consent first and update this policy.
8. Email and marketing
We only send the newsletter to people who subscribe. Every marketing email identifies us and includes a working unsubscribe link, and we action unsubscribes within five business days, in line with the Spam Act 2003 (Cth). Emails about something you asked for, such as a reply to your enquiry, are not marketing.
9. Keeping it secure
We take reasonable steps to protect personal information, including encrypted connections, access controls on our database, and limiting access to the people who need it. No system is completely secure. If a data breach is likely to cause serious harm, we will notify you and the Office of the Australian Information Commissioner as the Notifiable Data Breaches scheme requires.
10. Your rights
- Ask for access to the personal information we hold about you.
- Ask us to correct it, or to delete it where the law allows.
- Unsubscribe from marketing at any time.
- Withdraw consent to us passing an enquiry to a provider, before we have sent it.
Email jarred@referlabs.com.au with “Privacy request” in the subject line. We will respond within 30 days.
If you are unhappy with how we handled your information or a request, tell us first so we can try to fix it. You can also complain to the Office of the Australian Information Commissioner at oaic.gov.au.
If you live outside Australia, you may have additional rights under your local law, such as in the European Union, the United Kingdom or California. Contact us and we will help you exercise them. We do not sell or share personal information for targeted advertising.
11. Children
The site is intended for adults. We do not knowingly collect personal information from anyone under 18. If you think a child has sent us their details, contact us and we will delete them.
12. Changes to this policy
We will update this policy when what we collect or how we use it changes. The current version is always on this page, with the date it was last updated.
13. Contact
Pepform Pty Ltd trading as Refer Labs
ABN 32 660 008 159 · Melbourne, Victoria
Email: jarred@referlabs.com.au