Flowody Software (“we”, “us”) respects your privacy. This policy explains what personal information we collect when you use this website or engage us for work, why we collect it, and what we do with it. It is written to align with the Australian Privacy Principles under the Privacy Act 1988 (Cth).
1. What we collect
We collect only what we need in order to respond to you and carry out the work:
- Enquiry details — your name, organisation, email address, telephone number, country and whatever you write in the enquiry form.
- Client records — project documentation, invoices and correspondence created during an engagement.
- Technical data — anonymous usage statistics such as pages viewed, approximate region, browser and device type, and the IP address from which an enquiry was submitted (used to prevent spam).
- Access credentials — where you grant access to your hosting, domain or third-party accounts so that we can carry out the work.
We do not knowingly collect sensitive information such as health or financial account details, and we ask that you do not submit it through the enquiry form.
2. How we use it
We use your information to respond to your enquiry, prepare proposals, carry out and support the work you engage us for, issue invoices, meet our record-keeping obligations and improve this website. We do not sell your information, and we do not add you to a marketing list without your consent.
4. Storage and security
Data is held on secured cloud infrastructure with access limited to those who require it. We use encryption in transit, multi-factor authentication on our accounts and regular backups. No system is perfectly secure; if a data breach occurs that is likely to result in serious harm, we will notify you and the OAIC as required under the Notifiable Data Breaches scheme.
Enquiry records are retained for [X MONTHS] and client records for [X YEARS] to satisfy taxation and legal obligations, after which they are deleted or de-identified.
6. Your rights
You may ask us at any time for a copy of the personal information we hold about you, to correct anything inaccurate, or to delete information we no longer need to retain. Email privacy@flowodysoftware.com and we will respond within 30 days. We may need to verify your identity first.
7. Overseas clients and data transfers
We work with clients outside Australia, and some of our providers store data overseas (including in Japan and other regions used by our email and infrastructure providers). If you are located in the EU or the UK you may also hold rights under the GDPR, including the right to object to processing and to lodge a complaint with your local supervisory authority. Tell us which jurisdiction applies to you and we will handle your data accordingly.
8. Contact and complaints
Questions or complaints regarding privacy may be sent to privacy@flowodysoftware.com. We will acknowledge within 2 business days and aim to resolve the matter within 30 days. If you are not satisfied with our response you may contact the Office of the Australian Information Commissioner at oaic.gov.au.