Privacy policy

1. What we collect, and when

We collect only what each step needs:

• The contact form: your name, business name, email, mobile (if you give it), what your message is about and the message itself.
• The website preview: your business name, industry and suburb; a logo if you upload one; then your first name, email and mobile (optional) when you unlock the full preview. A preview that is never unlocked is deleted after 30 days.
• Your order: your account email, your business name, the plan and extras you chose, and your acceptance of our terms (with the date and time). Payment is taken by Stripe; we receive confirmation and an invoice reference, never your card or bank details.
• The questionnaire and uploads: your business details, services, service areas, hours, licence or registration numbers, logo and photos.
• How you use our site: first-party usage events with no personal data (for example that a preview was started), so we can see where people get stuck.

2. Why we collect it

To show you a preview, answer your message, take your order, build and host your site, register your domain in your name and ABN (which auDA requires), look after your site under the care plan, send you the messages you ask for, and meet our legal obligations.

3. Cookies and tracking

Our site sets a cookie only when you sign in (to keep you signed in) and when you unlock a preview (so you can come back to it). We do not use advertising cookies today.

When we start advertising, we plan to use Google Analytics, Google Ads and Meta tools to measure which ads bring people to our site. Before any of those are switched on, this policy is updated to say exactly what they collect and how to opt out.

The speed scores shown on our site are measured by Google PageSpeed Insights. Our servers send Google only the addresses of our own demo sites; no information about you or your visit is sent.

4. Messages from us

Service messages (your preview link, sign-in links, receipts, reminders about your order) are sent because you asked for them or they are part of your order. Marketing messages are sent only if you tick the box asking for them. Every email and SMS we send names us and has a working unsubscribe link, as the Spam Act 2003 requires.

5. Where your data is stored, and who sees it

Our systems run in Australia (Fly.io, Sydney). Payments are processed by Stripe. Emails and text messages are sent through our messaging providers ([email provider] and ClickSend). Your website is hosted in Australia. Your domain is registered with [registrar]. Each provider holds only what it needs to do its job, under its own privacy policy.

We do not sell your data, and we do not share it with anyone else except as the law requires.

6. How long we keep it

Previews that are never unlocked: 30 days. Contact enquiries, orders, invoices and terms acceptances: kept as business records for as long as the law requires. Your site content: for as long as you have a care plan, then handed to you and deleted from our systems after [retention period].

7. Access, correction and complaints

You can ask for a copy of what we hold about you, or ask us to correct it, by emailing [contact email]. We answer within 30 days.

If you are not happy with how we handled your information, tell us first and we will try to fix it. You can also complain to the Office of the Australian Information Commissioner (oaic.gov.au).

8. Changes to this policy

We update this page when what we collect changes. The date at the top tells you when it was last changed.

9. Contact

Privacy questions: [contact email], or write to [business address].

Clients and visitors in New Zealand

If you are in New Zealand, we handle your personal information under the Privacy Act 2020 and its information privacy principles, as well as this policy.

We store information in Australia. Before we disclose personal information outside New Zealand we make sure it will be protected in a way that, overall, gives comparable safeguards to the Privacy Act 2020 (information privacy principle 12).

You can ask to see or correct the personal information we hold about you. If we have a privacy breach that is likely to cause serious harm, we will tell you and the Office of the Privacy Commissioner as soon as practicable. You can complain to the Privacy Commissioner (privacy.org.nz).

Commercial emails and texts to you follow the Unsolicited Electronic Messages Act 2007: we send them only with your consent, we say who we are, and every one has a working unsubscribe.