Privacy
Draft — not yet reviewed by a lawyer
This page is a structure with the details still to be filled in. Anything shown like [THIS] is a blank the owner of the business has to complete, and the wording has to be checked by an Australian legal adviser before it means anything. Until then, please do not rely on it.
Who is responsible for your information
This product is run by [REGISTERED ENTITY NAME], ABN [ABN], of [REGISTERED BUSINESS ADDRESS].
If you want to ask about anything on this page, contact [PRIVACY CONTACT EMAIL].
What we hold
These are the things the product actually stores about you today:
- your email address, and your name if you give us one;
- a scrambled version of your password. We cannot read your password, and neither can anyone who works here;
- what you record about your station: properties, paddocks, mobs and head counts, water points and the checks and samples taken at them, fence lines and inspections, pasture assessments, wildlife sightings and musters;
- which plan you are on and whether it is paid up. Your card details are handled by Stripe and never reach us or our database;
- a record of significant actions taken in the product, kept so we can answer questions about who changed what.
Why we hold it
To run the product for you, to take payment for it, and to answer you when something goes wrong. We do not sell it, and we do not send marketing email — the product has no mail sending set up at all.
Who else can see it
The businesses we rely on to run the service. The owner must list every one of these before this page is published: [SUB-PROCESSOR LIST — NAME, PURPOSE, COUNTRY WHERE DATA IS HELD].
Some of these hold data outside Australia. The countries have to be named here: [OVERSEAS DISCLOSURE COUNTRIES].
How long we keep it
Your records stay while your account is open. After you close it we keep [RETENTION PERIOD], because [REASON, e.g. TAX AND RECORD-KEEPING OBLIGATIONS].
Getting a copy, or getting it deleted
You can download everything we hold about you, and you can close your account and have your records removed, from your settings page. Both work today.
Closing your account permanently removes your station records. Records of significant actions are kept, because an audit trail that disappears when someone deletes themselves is not an audit trail.
Keeping it safe
Passwords are stored scrambled with bcrypt, connections to the product are encrypted, and card details never touch our systems. The formal description of our security measures is still to be written: [SECURITY MEASURES STATEMENT].
If something goes wrong
Complaints go to [PRIVACY CONTACT EMAIL]. We will reply within [RESPONSE TIME]. If you are not satisfied you can take it to the Office of the Australian Information Commissioner.
Our obligations if there is a data breach, including the Notifiable Data Breaches scheme, are to be set out here: [BREACH NOTIFICATION PROCESS].
Changes to this page
When this changes we will say so here. Last updated: [DATE OF LEGAL REVIEW].