TidyRegister ("we", "us") provides compliance register software to Australian businesses. This policy explains what we collect, why, and how we handle it under the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).
Account details you give us when signing up (name, email, business name). Register data you enter into your compliance registers, which may include information about your employees, contractors, sites or suppliers depending on the register type. Billing details, processed by our payment provider — we don't store full card numbers. Usage data such as login timestamps and basic product analytics.
To provide the service: storing your registers, generating reminders, and giving auditors read-only access when you invite them. To bill you for the registers you have active. To respond to support requests. We don't sell your data, and we don't use register content for advertising.
Infrastructure and email providers we use to run the service (hosting, transactional email). Auditors you explicitly invite via an auditor access link you control and can revoke. We don't share register data with any other business using TidyRegister — every business's registers are isolated from every other's.
We keep your account and register data for as long as your account is active, plus a reasonable period after closure to meet our own record-keeping obligations and in case you want to reactivate. You can request deletion at any time, subject to any records we're required to retain by law.
Register entries are immutable once created — edits create a new version rather than overwriting history, so your audit trail can't be silently altered. Access to your business's data is scoped to your account and the auditor links you generate. We use industry-standard encryption in transit.
Under the Privacy Act, you can request access to, or correction of, personal information we hold about you. If you have a privacy concern, contact us first — if you're not satisfied with our response, you can lodge a complaint with the Office of the Australian Information Commissioner (OAIC).
Questions about this policy or your data: mark.laravel.coder@gmail.com.