Privacy policy

Who this policy covers

This policy describes information handled by Yopepi, the Australian laboratory catalogue comparison service. It covers our website, issue reports and privacy enquiries. Contact the Yopepi operator through the contact form linked below; choose “Privacy request or complaint” for privacy matters.

What we collect

You can browse comparisons without creating an account. Our campaign feature stores aggregate daily counts of visits, searches, size selections and supplier clicks, grouped by an approved campaign and source. Supplier clicks are also counted by listed product, supplier and nominal size. These are aggregate totals and are not linked to an individual visitor or browsing history. The campaign feature does not store your name, email, IP address, search words or an individual visitor identifier. Counts are interactions, not unique people or purchases.

When you submit a report or enquiry, we store the category, message, reference number and submission time. A price report also stores the selected offer’s product, supplier, size, listed price, source link and observation date, plus any corrected price or source link you provide. An email address is optional and is used only if you want a reply. You can submit without one, but we cannot contact you about your report.

Your message may contain personal information if you include it. Please do not submit health information, payment details, passwords, identity documents or information about another person. Our form accepts text, not file uploads.

Why we use it

We use reports to investigate catalogue errors, handle enquiries, respond where an email is provided, manage privacy requests and protect the reporting service from misuse. We use aggregate counts to understand which launch campaigns, site features and supplier listings receive interactions. We do not use report details to build marketing profiles, add you to a mailing list or sell personal information.

Cookies, hosting and external sites

Yopepi’s comparison and campaign features do not set tracking cookies or store browsing histories in your browser. The campaign counter respects the browser’s Do Not Track signal where supplied. Owner sign-in is handled by ChatGPT and may use authentication cookies; ordinary browsing and reporting do not require sign-in.

Yopepi is hosted through OpenAI Sites using Cloudflare infrastructure. Hosting, authentication and security providers may process connection information such as IP addresses, browser details and request logs under their own policies. The statement about anonymous campaign counts does not mean hosting providers never process this information.

Opening a supplier or advertiser link takes you to another website. That website’s privacy and cookie policies apply. Advertiser images may be loaded from an external host, which receives a connection request; images are requested without a referrer header. We do not embed third-party advertising trackers in our comparison pages.

Who can access information and overseas processing

Report contents are restricted to the Yopepi owner and the service providers needed to host and operate the website. Reports are not published, and sponsors do not receive individual reports or email addresses. We may disclose information where required by law. If a correction requires supplier input, use only the catalogue facts needed to investigate; personal contact details are not forwarded without permission.

OpenAI and Cloudflare operate internationally, so hosting and support processing may occur outside Australia, including in the United States. We do not represent that data stays exclusively in Australia; the complete set of processing locations is not confirmed.

Security and retention

We use HTTPS, owner-restricted access and server-side input validation. No internet service can guarantee absolute security. Please keep your report reference if you may need to contact us again.

Reports are normally retained for 90 days, then removed from the active inbox during a catalogue refresh or inbox check. This includes optional email addresses. Provider backups or security logs may have different retention periods. Aggregate campaign counts contain no individual visitor identifiers and may be retained for historical reporting.

Access, correction, deletion and complaints

Use the contact form and choose “Privacy request or complaint” to request access, correction or deletion, or to raise a concern. Provide your report reference and, if you want a reply, a contact email. We may need enough information to verify that the request relates to you, but please do not upload identity documents.

We aim to respond to privacy enquiries within 30 days. If a request cannot be fulfilled, we will explain why where we can contact you. If you remain concerned, you may contact the Office of the Australian Information Commissioner (OAIC); its jurisdiction and complaint requirements determine whether it can consider the matter.

Changes

We will update this page when our information practices change. New tracking or marketing uses will be disclosed before they are introduced. The date above identifies the current version.