Privacy Policy

We sell security and privacy advice, so it would be poor form to be careless with your data. This policy describes exactly what happens to it.

It covers both privacypicket.com and the Security Readiness Advisor at advisor.privacypicket.com. Both are operated by PRIVACY PICKET PTY LTD (ABN 11 655 636 981), a company registered in Victoria, Australia.

This website

privacypicket.com is a brochure site. It collects nothing from you directly: there are no forms, no sign-ups, no accounts, and no comment boxes. Reading it is anonymous as far as we are concerned.

The only way to contact us from here is the email address we publish, and that goes to our inbox the same as any other email.

If you email us

We receive whatever you choose to put in the message, and we keep the correspondence so we can pick up the thread later. We use it to answer you and to do the work you engage us for. We do not add you to a marketing list because you contacted us.

If we go on to work together, any information you share during that engagement is governed by the engagement terms and our duty of confidentiality, not just this page.

Analytics

We use Plausible Analytics on both sites. We chose it deliberately, because it does not use cookies, does not collect personal data, does not fingerprint your device, and does not follow you across other websites.

It records aggregate counts: pages viewed and roughly where in the world visitors come from. None of it identifies you.

The Security Readiness Advisor

The assessment tool at advisor.privacypicket.com works differently, because it has something to do. Your answers and your score are stored in your own browser using localStorage. They stay on your device, are not transmitted to us, and we have no way to read them.

They only ever reach us if you ask us to email you your results, in which case we use them to compose that one message and do not keep them. Buying a report does not send them to us: the report is our plan for the control you bought, and we keep a copy as first delivered so you can open it again.

The full detail is on the advisor's own privacy page, including what is kept and for how long.

What we do not do

• We do not sell your data.
• We do not set cookies or run trackers.
• We do not build advertising profiles or train models on your information.
• We do not require an account or a password to read anything here.

Who else is involved

We keep the list as short as we can. It is currently:

• Netlify, who host both sites.
• Plausible, for cookieless analytics.
• Mailgun, who deliver emails the advisor sends at your request. We use their European infrastructure.
• Paddle.com Market Ltd, who handle checkout and act as merchant of record if you buy a report. Paddle collects your billing details under their own privacy policy. We never receive your card details.

These providers operate internationally, so data described here may be processed outside Australia.

Your rights

Whatever country you are in, you can ask us to:

• tell you what we hold about you
• correct it if it is wrong
• delete it
• send you a copy

Email services@privacypicket.com and we will action it. There is no charge and no form. We aim to respond within 30 days. Given how little we hold, the honest answer is often "nothing".

Complaints

If you think we have mishandled your information, email services@privacypicket.com with the detail. We will acknowledge within 5 business days and give you a written answer within 30 days.

Australia's Privacy Act currently exempts businesses under a $3 million annual turnover, and we fall under that threshold, so we are not presently bound by the Australian Privacy Principles. We have chosen to follow them anyway, because a company selling privacy advice that leans on an exemption is not one you should hire. If that exemption is removed, or we grow past the threshold, nothing in this policy needs to change.

If you are in the EU or the UK, you have the right to complain to your local data protection supervisory authority, and nothing above affects that.

Security

All traffic is encrypted in transit. We collect as little as we can, because data we do not hold cannot be stolen.

We are a small business, not a bank, and we will not claim our systems are impenetrable. What we will claim is that both sites are deliberately designed to hold as little of your information as possible, which is the most effective privacy control available to anyone.

Changes to this policy

If we change this policy we will update the date below. If a change materially affects information we already hold, we will email the people it affects.

Contact

services@privacypicket.com

PRIVACY PICKET PTY LTD
ACN 655 636 981 · ABN 11 655 636 981