Privacy Policy

Effective date: 6 April 2026

Operator: privacycovered.com.au (ABN 40 691 630 38)

This policy describes how privacycovered.com.au collects, uses, and discloses personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

1. Information We Collect

We collect the following personal information when you purchase a compliance pack:

• Email address — to deliver your purchase and send regulatory alerts (if you sign up)
• Business name and profession — to generate templates scoped to your obligations
• Software stack selections — to tailor templates to your systems

We do not collect sensitive information, government identifiers, or payment card details. Payment is processed entirely by Stripe — we never see or store your card number.

2. How We Use Your Information

• To generate and deliver your compliance document templates
• To send regulatory alerts if you have opted in
• To respond to support enquiries

We do not use your information for direct marketing unless you have explicitly opted in to regulatory alerts.

3. Disclosure to Third Parties

We disclose personal information to the following third parties:

• Stripe (payment processing) — United States. Stripe is certified under the EU-US Data Privacy Framework and maintains SOC 2 Type II certification.
• Google Cloud Platform (hosting) — our application runs in the australia-southeast1 (Sydney) region. Application data remains in Australia.

We do not sell or rent personal information to any third party.

4. Cookies

We use Google Analytics (gtag.js) to understand how visitors use our website. Google Analytics uses cookies. You can opt out by installing the Google Analytics Opt-out Browser Add-on.

We do not use cookies for advertising or tracking beyond basic analytics.

5. Data Security

We protect your information using:

• HTTPS encryption for all data in transit
• Stripe for PCI-compliant payment processing
• Google Cloud Run managed infrastructure with automatic security patching

6. Data Retention

Generated compliance packs are stored temporarily for download and deleted within 60 minutes. Email addresses for regulatory alerts are retained until you unsubscribe.

7. Your Rights

Under the Australian Privacy Principles, you have the right to:

• Access the personal information we hold about you (APP 12)
• Correct inaccurate personal information (APP 13)
• Complain about how we handle your personal information

To exercise these rights, contact support@privacycovered.com.au. We will respond within 30 days.

8. Complaints

If you are not satisfied with our response, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.

9. Changes to This Policy

We may update this policy from time to time. The current version will always be available at this URL.

10. Contact

For privacy enquiries, contact support@privacycovered.com.au.