Privacy Policy

1. About this policy

This Privacy Policy describes how Better Privacy Pty Ltd (ABN pending) ("we", "us", "our") collects, uses, discloses, and manages personal information in connection with the Better Privacy website at betterprivacy.com.au, the compliance platform, documentation site at docs.betterprivacy.com.au, and any related services (collectively, the "Services").

We are committed to handling personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles ("APPs").

2. Information we collect

We may collect the following types of personal information:

• Account information: Name, email address, business name, job title, and contact details when you register for the platform or express interest in our Services
• Assessment data: Information you provide through compliance assessments and questionnaires, which may include details about your business operations, data processing activities, and current compliance posture
• Usage data: Information about how you interact with the Services, including pages visited, features used, assessment progress, and session data
• Technical data: IP address, browser type and version, device information, operating system, and referral source
• Communication data: Records of correspondence when you contact us via email or other channels
• Payment data: Payment information processed by our third-party payment providers (we do not store full payment card details)

3. How we use your information

We use personal information for the following purposes:

• To provide, maintain, and improve the Services
• To generate compliance assessments, documents, and guidance tailored to your business
• To communicate with you about your account, the Services, and relevant updates
• To process payments and manage your subscription
• To respond to your enquiries and provide support
• To monitor and analyse usage patterns to improve the platform
• To comply with our legal obligations
• To protect the security and integrity of the Services

We do not sell your personal information. We do not use your assessment data or compliance information to train AI models or for any purpose other than providing the Services to you.

4. Disclosure of information

We may disclose personal information to:

• Service providers: Third-party providers who assist us in operating the Services, including hosting, payment processing, analytics, and email delivery. These providers are contractually obligated to protect your information
• Professional advisors: Lawyers, accountants, and auditors where necessary
• Law enforcement: Where required by law, regulation, legal process, or enforceable government request
• Business transfers: In connection with a merger, acquisition, or sale of assets, with appropriate confidentiality protections

We do not disclose your assessment data, compliance information, or generated documents to any third party except as necessary to provide the Services or as required by law.

5. Overseas disclosure

Some of our service providers may be located outside Australia. Where we transfer personal information overseas, we take reasonable steps to ensure the recipient handles it in accordance with the APPs.

6. Data security

We implement reasonable technical and organisational measures to protect personal information from unauthorised access, loss, misuse, or alteration. However, no method of transmission over the internet or electronic storage is completely secure, and we cannot guarantee absolute security.

7. Data retention

We retain personal information for as long as necessary to provide the Services, comply with our legal obligations, resolve disputes, and enforce our agreements. Assessment data and generated documents are retained for the duration of your account and for a reasonable period after termination to allow you to retrieve your data.

8. Your rights

Under the Privacy Act 1988 (Cth), you have the right to:

• Access the personal information we hold about you
• Request correction of inaccurate or outdated information
• Complain about a breach of the APPs

To exercise any of these rights, contact us at info@betterprivacy.com.au. We will respond within 30 days.

9. Cookies and analytics

The Services may use cookies and similar technologies to enhance your experience, analyse usage, and support the functionality of the platform. You can manage cookie preferences through your browser settings. Disabling certain cookies may affect the functionality of the Services.

10. Automated decision-making

The Services may use automated processes to generate compliance assessments, maturity scores, gap analyses, and document recommendations based on the information you provide. These outputs are intended as guidance tools to support your decision-making — they do not make legally binding decisions about you or your business.

No automated decision-making within the Services produces legal effects or similarly significant effects on individuals without human involvement. Assessment results and compliance scores are indicative only and should be reviewed by a qualified person before being acted upon.

If you believe an automated output has affected you in a way that requires human review, contact us at info@betterprivacy.com.au.

We are monitoring the automated decision-making provisions under the proposed reforms to the Privacy Act 1988 (Cth) and will update our practices and this policy as those obligations come into effect.

11. Third-party links

The Services may contain links to third-party websites or services. We are not responsible for the privacy practices or content of those third parties. We encourage you to review their privacy policies before providing any personal information.

12. Children's privacy

The Services are not directed at individuals under 18 years of age. We do not knowingly collect personal information from children. If you believe we have inadvertently collected such information, contact us and we will take steps to delete it.

13. Important disclaimers

Better Privacy is not a law firm and does not provide legal advice. The compliance guidance, assessments, and documents provided through the Services are general in nature. They do not constitute legal advice and should not be relied upon as such. You should seek independent legal advice for matters specific to your business.

Use of the Services does not guarantee compliance with the Privacy Act 1988 (Cth), the Australian Privacy Principles, or any other applicable law, regulation, or standard. Compliance is your responsibility and depends on factors beyond the scope of the Services.

We are not liable for any regulatory penalties, fines, enforcement actions, or other consequences arising from your privacy practices or compliance position, whether or not you have used the Services.

14. Changes to this policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on our website with a revised "last updated" date. Continued use of the Services after changes constitutes acceptance of the updated policy.

15. Complaints and contact

If you have questions, concerns, or complaints about how we handle personal information, contact us at:

Better Privacy Pty Ltd
Email: info@betterprivacy.com.au

If you are not satisfied with our response, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC).