Privacy policy

Who we are

AML Compare ("we", "us", "our") operates amlcompare.com.au, an independent comparison site for Australian AML/CTF software and consultants, run from Australia. For anything to do with your personal information, email hello@amlcompare.com.au.

What we collect

• Enquiries through Get help: your name and email address; your phone number if you give it; where you're up to with Tranche 2, your sector and the kinds of help you tick; any vendors or consultants you're already weighing up; anything you write in the message box; and that you ticked the consent box. If you arrive from a vendor review, the "weighing up" box starts with that vendor filled in, and you can change or clear it before you send.
• Consultant and vendor sign-ups through For consultants and List your software: your name and email address, plus whatever else you fill in, such as your phone number, role, firm or product name, website, the sectors, regions and services you cover, how many enquiries you could take, what you're interested in, and your message.
• Emails you send us, including your email address and anything in them.
• Usage data from Google Analytics and from our own analytics script, both described below.

When you send a form, Netlify, which hosts the site, stores it with the time it was sent, your IP address, your browser details (user agent) and the address of the page you sent it from.

How we use it

• To reply to you, and to work out what kind of help fits your enquiry.
• To make an introduction. If a consultant or software vendor fits what you've told us, we may pass your name, contact details and the details of your enquiry to that business so it can contact you. The consent box on the enquiry form covers this, and we may be paid a referral fee when we do it (see how we make money). If you don't want an introduction, say so in your message or email us.
• For consultant and vendor sign-ups: to discuss our referral panel, corrections to a listing, or featured placement.
• To see how the site is used, such as which pages are read and which forms are sent, so we can improve it.

We don't sell your details or add them to a marketing list, and there are no advertising networks on this site.

Google Analytics and cookies

We use Google Analytics to understand how people use the site. It records the pages you view and how you interact with them, the site that sent you here, your device and browser, and your approximate location, which Google works out from your IP address. It uses cookies, such as _ga and _ga_RDQCNFJNEZ, to recognise your browser on later visits. When you send one of our forms, it also records that a form was sent (for an enquiry, the event "generate_lead"), never what you typed. Google handles this data under its own privacy policy. You can opt out with Google's opt-out browser add-on, and you can block or delete its cookies in your browser settings.

Apart from Google Analytics, the site sets no cookies.

Our own analytics

As well as Google Analytics, this site uses a small analytics script that we run ourselves. Each time you load a page or interact with it, the script sends a short record to our hosting provider, Netlify, where it is stored. A record contains: the time; the page address without anything after a "?"; the page's type and, where the address names one, the listing, article or tool it shows; the website that sent you here (its address up to the domain, nothing more); your device type (mobile, tablet or desktop) and browser family; and, if the link you followed had them, its utm_source, utm_medium and utm_campaign campaign tags, which are kept for the rest of your visit. It also records when you click a phone, email or external link (for external links, the destination website's domain; never the phone number or email address), when you submit a form (the form's name or ID, never what you typed), labelled results that a tool on the page reports, whether you scrolled past 50% and 90% of a page, and whether the page was visible for 30 seconds.

Netlify tells us which country your connection comes from; we do not store your IP address. Your browser's user-agent is used to work out its browser family and to flag automated traffic such as search-engine crawlers; the user-agent itself is not stored. To group page views into visits, the script keeps a random visitor ID in this site's local storage that is replaced each day (UTC), and a random session ID in session storage that is replaced after 30 minutes of inactivity or when you close the tab. If your browser blocks storage, a temporary ID is used for that page only. The script sets no cookies, is not used for advertising and does not link your visits to other websites. The data is processed and stored by Netlify on our behalf and is not sold. We delete these records 14 months after they are made; after that we keep only daily totals, such as how many times a page was viewed, which cannot be linked to a visit or a visitor ID. You can remove the stored IDs at any time by clearing this site's data in your browser.

Who else handles your information

• Netlify, based in the United States, hosts the site, stores form submissions, emails us a copy of each one, and stores the records from our own analytics script.
• Google provides Google Analytics and the site's fonts. When your browser loads the fonts from Google Fonts, Google receives your IP address and browser details, as with any web request.
• Namecheap hosts our email. Emails you send us, and the copies of form submissions that Netlify sends us, are stored in our mailboxes there.
• Stripe takes payment if a vendor subscribes to featured placement through the link on List your software. Stripe collects and processes the payment details under its own privacy policy, and gives us the customer, subscription and payment details we need to manage the placement.
• Consultants and vendors we introduce you to, as described above. Once they have your details, their own privacy policies apply.

Some of these providers store or process data outside Australia, including in the United States.

Vendors and consultants we list

Our reviews and the consultant directory are compiled from businesses' own published pages and from what they tell us. The directory shows business details only: firm name, website, sectors, services and regions. Where a vendor confirms details in writing, the review may name the person who confirmed them and their role. We don't publish personal email addresses or phone numbers. If you're named on the site and want that changed, email us.

How long we keep it

We keep form submissions in Netlify, and emails in our mailboxes, until we delete them; we don't delete them on a fixed schedule. Records from our own analytics script are deleted after 14 months, as described above. Google Analytics keeps its data for the period set in our Google Analytics account. You can ask us to delete your details at any time.

Your rights

You can ask us what personal information we hold about you, ask us to correct it, or ask us to delete it, by emailing hello@amlcompare.com.au. We'll reply within 30 days. If we've already introduced you to a consultant or vendor, we'll tell you who, so you can ask them as well.

If you're not happy with how we handle a privacy complaint, you can contact the Office of the Australian Information Commissioner at oaic.gov.au.

Changes to this policy

Last updated 10 October 2026. If we change what the site collects or how we use it, we'll update this page and its date.