Privacy Policy

This Privacy Policy explains how DutyBound ("we", "us", "our") collects, uses, discloses, and protects your personal information when you use this website and related services. We are committed to handling personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

Note: we are an early-stage product and this website is currently a marketing and reference site. At this stage we collect very little personal information — in practice, only the email address you choose to send us if you contact us or ask to join our waitlist. Our free tools and downloads do not require you to provide any personal information, and our analytics are cookieless and aggregate-only (details below).

What personal information we collect

Depending on how you interact with us, we may collect:

• Contact details — primarily your email address, and optionally your name, organisation, and role, if you provide them when joining our waitlist or submitting an enquiry or assessment request.
• Technical and usage information — standard information your browser sends, and privacy-friendly, aggregated analytics (via Plausible) about how pages are used. This analytics is cookieless, does not track you across sites, and is not used to identify you personally (see "Cookies and analytics" below).

We do not ask you to submit sensitive personal information, health information, or actual incident records through this website. In particular:

• Free tools (including the SIRS Decision Tool) run entirely in your browser. Anything you enter — including incident details or the "became aware" time used to calculate a reporting deadline — stays on your device. It isnot transmitted to us, not saved, and not stored anywhere (we don't even use browser local storage for it); it is discarded as soon as you leave or refresh the page.
• Template downloads (the NDIS incident report template in Word and PDF) are served as static files. Downloading them collects no personal information and does not require an email address or sign-up.

How we collect it

We collect personal information directly from you when you choose to contact us — currently by email (our calls-to-action open your email client via amailto: link). When our waitlist/assessment form goes live it will be hosted by a third-party form provider, and completing it will be another way you can choose to give us your details. Aggregate technical information is collected automatically when you browse, via cookieless analytics.

Why we collect and use it

We use personal information to:

• add you to our waitlist and notify you about early access and product availability;
• respond to your enquiries and provide the assessment or information you request;
• send you related updates you have asked to receive (you can opt out at any time);
• understand, in aggregate, how our site is used so we can improve it; and
• meet our legal and record-keeping obligations.

We will only use your information for the purpose it was provided, a directly related purpose you would reasonably expect, or where you have consented.

Direct marketing and opt-out

If you join our waitlist or otherwise opt in, we may send you product updates and related information. Every marketing email includes an unsubscribe link, and you can opt out at any time by using that link or by contacting us. We will action opt-out requests promptly.

Disclosure to third parties

We do not sell your personal information. The third parties currently involved in operating this site are:

• Vercel — website hosting and content delivery. Vercel serves the site's pages and files; its infrastructure may be located in theUnited States (see "Overseas disclosure" below).
• Plausible Analytics — cookieless, aggregate page analytics. It does not receive any information that identifies you.

When our waitlist/assessment form and email tooling go live, we will add the relevant providers (for example, a form provider such as Tally and an email/CRM tool) here and share your information with them only so they can perform those services for us.

Overseas disclosure

Because our site is hosted on Vercel, whose infrastructure may be located in the United States, some technical data (such as the request information your browser sends when loading a page) may be processed overseas. Our analytics provider processes only aggregate, non-identifying data. Where personal information is disclosed overseas, we take reasonable steps to ensure it is handled consistently with the APPs.

How we store and protect your information

We take reasonable technical and organisational steps to protect personal information from misuse, interference, loss, and unauthorised access, modification, or disclosure. No method of transmission or storage is completely secure, but we work to protect your information and to retain it only for as long as we need it for the purposes above or as required by law.

Accessing and correcting your information

You can ask us to access the personal information we hold about you, or to correct it if it is inaccurate, out of date, or incomplete. Contact us using the details below and we will respond within a reasonable period. If we cannot give you access, we will explain why.

Cookies and analytics

This site uses Plausible Analytics, a privacy-friendly analytics tool. It is cookieless — it sets no cookies on your device — and it collects only aggregate usage data (such as page views and referring sites). It does not track you across other websites, does not build an advertising profile, and does not identify you as an individual. Because no cookies are set and no personal data is collected for analytics, this site does not require a cookie-consent banner. If we ever change analytics providers, we will update this section.

Complaints

If you have a concern about how we have handled your personal information, please contact us first so we can try to resolve it. If you are not satisfied with our response, you can contact the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.

Changes to this policy

We may update this Privacy Policy from time to time. The "last updated" date at the top of this page shows when it was last revised. Material changes will be reflected here.

Contact us

For any privacy question, request, or complaint, contact us at:

• Email: [email protected]
• Entity: DutyBound (ABN to be added — TODO before scale)

This policy provides general information and is a template starting point for an early-stage marketing site. It is not legal advice. Before scaling or collecting additional categories of personal information, have it reviewed by a qualified privacy or legal professional.