Privacy Policy

We sell security and privacy guidance, so it would be poor form to be careless with your data. This policy describes exactly what happens to it, in the order it happens.

This site is operated by PRIVACY PICKET PTY LTD (ABN 11 655 636 981), a company registered in Victoria, Australia.

The self-assessment

When you work through an assessment, your answers and your readiness score are stored in your own browser using localStorage. They stay on your device. They are not transmitted to us, and we have no way to read them.

Clearing your browser data deletes them. We cannot recover them for you, because we never had them.

If you email yourself your results

Emailing your results is the one point where assessment information leaves your browser, and only because you asked for it. When you use it, your browser sends us your email address together with the summary shown on screen: your readiness percentage, your readiness band, and the quick wins listed for you.

We use that information to compose one email and send it to you. Then it is gone. We do not write it to a database, and we do not keep your email address on a list.

Our server logs record that a message was sent, with your address partially masked (for example bre***@example.com) so we can troubleshoot a delivery failure without keeping the full address lying around in a log file.

If you ask to be notified

Some assessments are not published yet, and you can ask to be told when one is ready. That sends us your email address and which assessment you are waiting for. We use it to send you that notification and nothing else. We do not sell it, share it, or add you to a marketing list you did not ask for.

Analytics

We use Plausible Analytics. We chose it deliberately, because it does not use cookies, does not collect personal data, does not fingerprint your device, and does not follow you across other websites.

It records aggregate counts: pages viewed, which assessments get started and finished, and roughly where in the world visitors come from. None of it identifies you, and none of it can be tied back to your assessment answers.

This site sets no cookies at all, which is why you have not been shown a cookie banner. That is not an oversight.

If you buy a report

To produce a report personalised to your answers, those answers have to reach our server. Here is the whole flow.

1. You select the report and your browser sends you to our payment provider's checkout page.
2. You pay on their page. Your card details go to them, never to us. We have no access to your card number and it never passes through our systems.
3. They confirm the purchase to us and give us your email address and a purchase record.
4. Your browser sends your assessment answers to us once, over an encrypted connection.
5. We combine your answers with our guidance content, produce your report, and return it to you.
6. We store the finished report so you can download it again later without retaking the assessment.

What we keep, and for how long

What we do not do

• We do not sell your data. There is no version of this business where we do.
• We do not share your assessment answers or your report with anyone.
• We do not use your answers to build profiles, train models, or target advertising.
• We do not set cookies or run trackers.
• We do not require an account, a password, or a login.

Who else is involved

We keep the list of third parties as short as we can. It is currently:

• Netlify, who host the site and run the small amount of server code described above.
• Mailgun, who deliver the emails you ask for. We use their European infrastructure.
• Plausible, for cookieless analytics.
• Our payment provider, who handles checkout and acts as merchant of record if you buy a report. They collect your billing details under their own privacy policy. We never receive your card details.

These providers operate internationally, so data described in this policy may be processed outside Australia.

Your rights

Whatever country you are in, you can ask us to:

• tell you what we hold about you
• correct it if it is wrong
• delete it
• send you a copy

Email services@privacypicket.com and we will action it. There is no charge and no form to fill in. We aim to respond within 30 days. Given how little we keep, the honest answer to "what do you hold about me" is often "nothing".

If you are in the EU or the UK, the GDPR gives you these rights formally. Where we process your email address to deliver something you asked for, our lawful basis is performance of a contract or your consent, depending on which you used.

Complaints

If you think we have mishandled your information, email services@privacypicket.com with the detail. We will acknowledge it within 5 business days and give you a written answer within 30 days. There is no form and no escalation ladder. You are emailing the people who built this.

Australia's Privacy Act currently exempts businesses under a $3 million annual turnover, and we fall under that threshold, so we are not presently bound by the Australian Privacy Principles. We have chosen to follow them anyway, because a company selling privacy advice that leans on an exemption is not one you should buy from. If that exemption is removed, or we grow past the threshold, nothing described in this policy needs to change.

If you are in the EU or the UK, you have the right to complain to your local data protection supervisory authority, and that right is not affected by anything above.

Security

• All traffic is encrypted in transit.
• Card data never enters our systems.
• Email addresses are masked in our logs.
• We collect as little as we can, because data we do not hold cannot be stolen.

We are a small business, not a bank, and we are not going to claim our systems are impenetrable. What we will claim is that this product has been deliberately designed to hold as little of your information as possible, which is the most effective privacy control available to anyone.

Changes to this policy

If we change this policy we will update the date below. If a change materially affects what we do with information we already hold, we will email the people it affects.

Contact

services@privacypicket.com

PRIVACY PICKET PTY LTD
ACN 655 636 981 · ABN 11 655 636 981