Privacy Policy
Contents
1. Who we are
Cypaction Pty Limited (ACN 008 650 664) ("Cypaction", "we", "us", "our") is an Australian mobile application development company. We are committed to handling personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs) in Schedule 1 of that Act.
Cypaction may in the future transfer the operation of individual apps to wholly-owned subsidiaries. If that occurs, those subsidiaries will publish their own privacy policies. This policy covers Cypaction Pty Limited as the corporate entity only.
2. Scope of this policy
This policy applies to personal information collected by Cypaction through our company website at cypaction.org and direct business communications. It does not cover our individual mobile applications — each app will have its own privacy policy published on its own website once launched. This policy is governed by Australian law.
3. What personal information we collect
We may collect the following types of personal information:
- Contact details — name, email address, and message content when you contact us via our website or email
- Business contact information — name, business name, email, and phone number of contractors, suppliers, and professional contacts
- Website usage data — standard web server logs (IP address, browser type, pages visited, time of visit) collected automatically
We do not collect sensitive information through our website. We do not operate advertising technology or user profiling on this site.
4. How we collect personal information
We collect personal information directly from you when you contact us, automatically through web server logs, and in the course of business when engaging contractors or suppliers. We do not purchase personal information from third-party data brokers.
5. Why we collect personal information
We collect and use personal information only for the purposes for which it was collected (APP 6):
- Responding to your enquiries and support requests
- Managing business relationships with contractors and suppliers
- Operating and improving our website
- Communicating about our company and products where you have expressed interest
- Complying with our legal obligations
We do not sell personal information. We do not share personal information with third parties for their own marketing purposes. We do not display advertising on our website.
6. Overseas disclosure (APP 8)
The following third-party providers may receive or process information collected through our website:
| Provider | Purpose | Location |
|---|---|---|
| GitHub Pages (Microsoft) | Website hosting and access logs, including visitor IP addresses | United States — governed by GitHub Privacy Statement and Microsoft Data Protection Addendum |
| Google Workspace | Receiving and storing email enquiries | United States — governed by Google's Data Processing Terms and Google's Australian Privacy Principles whitepaper |
| Formspree | Processing contact form submissions | United States — governed by Formspree Privacy Policy and Terms of Service |
Under APP 8, Cypaction remains accountable for how these providers handle personal information about Australians.
7. How we protect your information (APP 11)
We take reasonable steps to protect personal information from misuse, interference, loss, and unauthorised access. Our measures include encrypted transmission (HTTPS), access controls, and use of security-conscious third-party providers.
Retention periods
| Data type | Retention period |
|---|---|
| Contact form enquiries (name, email, message) | 6 months from the date of the enquiry, then deleted |
| Contractor and supplier contact records | 6 months after the end of the business relationship, then deleted or de-identified |
| Email correspondence | 6 months from the date of the last relevant communication, then deleted |
| Web server logs (IP address, browser type, pages visited) | 6 months from collection, then deleted by the hosting provider |
8. Your rights — access, correction and deletion (APP 12 & 13)
You have the right to request access to, correction of, or deletion of personal information we hold about you. To make a request, contact us at hq@cypaction.org. We will respond within 30 days at no charge. You can also visit our Support page for further guidance.
9. Data breaches
If we become aware of a data breach likely to result in serious harm, we will notify affected individuals and the OAIC as soon as practicable under the Notifiable Data Breaches scheme (Part IIIC, Privacy Act 1988).
10. Changes to this policy
We may update this Privacy Policy from time to time. The current version will always be published at cypaction.org/privacy.html. Material changes will be notified on our website.
11. Complaints
If you have a concern about how we have handled your personal information, contact us first at hq@cypaction.org. We will acknowledge your complaint within 5 business days and aim to resolve it within 30 days.
If you are not satisfied with our response, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC):
- Website: www.oaic.gov.au
- Phone: 1300 363 992
- Post: GPO Box 5218, Sydney NSW 2001
12. Contact us
For all privacy enquiries, access or correction requests, or complaints:
Cypaction Pty Limited
Email: hq@cypaction.org
This policy is governed by the laws of Australia.