This Privacy Policy applies to READYRUN PTY LTD (ACN 701 342 092), trading as READYRUN DIGITAL (ABN 50 701 342 092) ("ReadyRun", "we", "us" or "our").

It covers personal information handled through our website, quote and enquiry forms, client communications, project delivery, support, administrative systems and any custom business portal we operate for a client.

Depending on how you deal with us, we may collect your name, business or company name, email address, phone number, website address, project requirements, service selections, quote information, correspondence, support requests and other information you choose to provide.

For clients and authorised portal users, we may also hold business contact details, project records, cases, notes, task information, pipeline data, invoice or billing-related records, user account details and activity required to provide the agreed service.

Our website and application platform may automatically process technical information such as IP address, device and browser information, session data, security and abuse-prevention logs, and essential cookies or browser storage used for authentication, navigation and interface preferences. For our public enquiry form, we may derive one-way hashed identifiers from an IP address or email address for short-term rate limiting and abuse prevention rather than storing the raw value in the rate-limit record.

Authorised ReadyRun HQ staff may opt a supported device into private push notifications. For that purpose we may store the administrator user identifier, device/browser label, encrypted web-push subscription endpoint and public subscription keys, notification preferences, business role and delivery status. Push subscriptions are restricted to authorised HQ administrators and can be disabled from the device or HQ settings.

Payment card details are entered into Stripe-hosted payment interfaces and are not collected or stored as raw card numbers by ReadyRun HQ. We may retain Stripe identifiers, payment status, invoice and subscription information needed to reconcile payments and recurring services.

We do not intentionally request sensitive information through our public website. Please do not provide sensitive information unless it is reasonably necessary for an agreed service and we have asked you to provide it or there is another lawful basis for us to handle it.

We primarily collect personal information directly from you when you submit an enquiry or quote request, communicate with us, become a client, use an authorised portal, provide content or access for a project, or request support.

We may also receive business contact information from a person acting on behalf of your organisation, a referral source, an authorised integration, or another source where collection is lawful and reasonably expected in the circumstances.

We use personal information to respond to enquiries, prepare estimates and proposals, deliver websites and business systems, manage projects and client relationships, provide support, send service communications, maintain security, administer accounts, manage billing and invoices, improve our services and comply with legal obligations.

Where permitted by law, we may also use business contact information to communicate about relevant ReadyRun services. Commercial electronic messages are sent only where we have the consent or another basis required by applicable Australian law, identify the sender, and provide a functional way to unsubscribe where required. You can ask us to stop direct marketing communications at any time.

We do not sell personal information.

We may disclose personal information to service providers that help us operate our website, systems and business, including hosting, database, authentication, email delivery, logging, infrastructure and professional service providers. We may also disclose information where required or authorised by law, to protect legal rights or security, or with your consent.

Our website and application infrastructure currently uses Base44, operated by Wix.com Ltd and related providers. Base44 acts as a processor for application data and uses third-party sub-processors to provide hosting, storage, communications, logging and related services.

Some of our technology providers process or store information outside Australia. Base44 currently states that app data is stored in the United States by default unless an eligible workspace has been configured for another supported data-residency region. Data residency does not necessarily mean all processing occurs only in that region, and Base44/Wix and their published sub-processors may process information in the United States and other countries.

Provider locations, sub-processors and available residency settings may change over time. Where Australian privacy law applies to an overseas disclosure, we take reasonable steps appropriate to our role and the available service configuration to ensure information is handled consistently with applicable requirements.

Our site and application platform use technical storage mechanisms that are necessary for functions such as authentication, session handling, route state and interface preferences. ReadyRun HQ may use session-scoped browser storage to protect unsaved document drafts during the current browser session. The public site code does not currently include a third-party advertising pixel.

ReadyRun HQ can be installed to a supported device as a progressive web app. Installation does not create or grant an account. HQ access continues to require an authorised administrator session. Push notifications are opt-in and role-aware; before delivery our system checks that the subscribed user remains an authorised HQ administrator and that the notification category is allowed for that staff profile. We intentionally keep customer email addresses, phone numbers and detailed project notes out of the notification text shown on a device lock screen.

Our platform provider may process technical, usage, security and analytics information to operate, secure and improve its infrastructure. If we add optional analytics, advertising or marketing cookies in the future, we will update this policy and introduce any consent controls required by applicable law.

Information may be stored electronically in cloud-based systems used to operate ReadyRun and client services. We use access controls and other reasonable technical and organisational measures appropriate to the nature of the information and service, including role-based administrative access, server-side validation, public-form abuse controls and rate limits, restricted database permissions, verified payment webhooks, notification-recipient revalidation and security logging where available.

Administrative areas of ReadyRun systems are restricted to authorised accounts. However, no internet transmission or storage system can be guaranteed to be completely secure, and you should avoid sending information that is not reasonably required for the service.

We retain personal information for as long as reasonably necessary for the purpose for which it was collected, to provide or support a service, maintain appropriate business and financial records, resolve disputes, enforce agreements and meet legal or regulatory obligations.

Short-term public-form rate-limit records are designed for abuse prevention and contain hashed identifiers rather than the raw IP address or email address used to derive them. They are not intended to become a marketing profile.

When information is no longer reasonably required, we may delete, destroy or de-identify it, subject to backup cycles, legal retention requirements and technical limitations.

You may ask to access personal information we hold about you or request correction of information that is inaccurate, out of date, incomplete, irrelevant or misleading. We may need to verify your identity before acting on a request.

To make a request, contact ReadyRun through the enquiry/contact channel on this website and clearly state that your message is a privacy access or correction request.

If you believe we have mishandled your personal information, contact us through the website and include enough detail for us to investigate. We will review the complaint and aim to respond within 30 days where practicable.

If you are not satisfied with our response and the Privacy Act 1988 (Cth) applies, you may be able to make a complaint to the Office of the Australian Information Commissioner (OAIC).

If we become aware of a suspected loss of, unauthorised access to, or unauthorised disclosure of personal information, we will take reasonable steps to contain and assess the incident and reduce potential harm. Where the Notifiable Data Breaches scheme or another applicable law requires notification, we will take the steps required by that law, including notifications to affected individuals and the relevant regulator where applicable.

Please notify us promptly through our contact channel if you believe personal information or an account connected with ReadyRun has been compromised.

We do not currently use personal information in a fully automated decision-making process that we reasonably expect would significantly affect an individual's rights or interests. If that changes, we will update this policy before the relevant process is used where required by law.

We may update this Privacy Policy when our services, information-handling practices, technology providers or legal obligations change. The current version will be published on this page with its last-updated date.

Privacy enquiries, access requests, correction requests, data-breach reports and complaints should be submitted to READYRUN PTY LTD trading as READYRUN DIGITAL through the contact or project enquiry channel available on this website or by email to hello@readyrundigital.com.