Privacy policy
Draft for review. This is a plain-English draft based on the Australian Privacy Principles. Have it checked by a lawyer and fill in the bracketed details before the site goes live.
Who we are
Vayuss ("we", "us") is a software and IT business based in Bunbury, Western Australia. This policy explains how we handle personal information under the Privacy Act 1988 (Cth) and the Australian Privacy Principles.
What we collect
- Enquiries: your name, email address, company, phone number and anything you write in our contact form or send us.
- Clients: contact and billing details, and information needed to set up, migrate and support your systems.
- Client data we host or migrate: the records in your business systems (for example your customers, stock and sales). We handle this on your behalf and only as you instruct.
- Website use: basic technical information such as browser type and pages visited, if analytics are enabled. [State whether you use analytics, and which.]
We don't ask for sensitive information through the website. If you're a health or wellness practice and we work on systems that hold health information, we handle it under a separate written agreement with extra safeguards.
How we use it
To reply to enquiries, prepare quotes, deliver and support our services, send invoices, and meet our legal obligations. We won't sell your information, and we'll only send marketing emails or SMS with your consent, with an easy way to unsubscribe (as required by the Spam Act 2003).
Who we share it with
Only service providers who help us run the business, such as our website form provider, email, hosting, accounting and SMS services, and only as much as they need. [List key providers, e.g. Web3Forms for the contact form.] Some of these may store data outside Australia; where that happens we take reasonable steps to make sure your information is protected. Where you choose Australian hosting for your systems, your business data is stored in Australia.
How we keep it safe
We use access controls, multi-factor sign-in, encryption in transit and regular backups, and we keep information only as long as we need it for the purposes above or as the law requires (for example, tax records).
Data breaches
If a data breach is likely to cause serious harm, we'll notify you and the Office of the Australian Information Commissioner as required by the Notifiable Data Breaches scheme.
Access, correction and complaints
You can ask to see or correct the personal information we hold about you, or make a privacy complaint, by emailing hello@vayuss.com or calling 08 0000 0000. We'll respond within 30 days. If you're not satisfied, you can contact the Office of the Australian Information Commissioner at oaic.gov.au.