1. Information We Collect
We collect various types of information to provide and improve our services, including:
1.1 Personal Information
- User Accounts: When you create a user account on RiskSupport, we collect personal information such as your name, email address, and password. This is necessary to provide access to your account and ensure proper user authentication.
- Organisation Information: We collect details about your organisation, including the organisation name, address, and contact information, to assist with managing risk within your organisation.
- Incident Reports: Users may submit incident reports which may include personal information about individuals involved, including but not limited to, the names, contact details, and other identifying information of adults and children. This data is provided voluntarily by the user. Please note that information regarding children may be stored if included in incident reports.
1.2 Contact Information
- Individuals Stored by Users: As part of risk management activities, users can store contact information of other people (e.g., employees, stakeholders, or contacts relevant to incident management). This information is voluntarily provided by the user to facilitate risk management processes.
1.3 Payment Information
- Stripe Transactions: If you make any payments through our platform, payment details (such as credit card information) are processed by Stripe, our third-party payment provider. We do not store or have direct access to your payment details. Stripe’s privacy policy governs the processing and storage of payment information.
2. How We Use Your Information
We use your personal information for the following purposes:
- To create and manage user accounts, allowing access to the RiskSupport platform.
- To assist in risk management activities by storing and managing organisation and contact information.
- To process incident reports and support incident management activities.
- To improve and personalise the services we offer.
- To communicate with you regarding updates, new features, and customer support inquiries.
- To comply with legal obligations and resolve disputes.
3. How We Protect Your Information
We are committed to protecting your personal information and take reasonable precautions to safeguard it. We implement industry-standard security measures to prevent unauthorised access, use, or disclosure of your personal data. However, please note that no method of transmission over the internet or electronic storage is completely secure, and we cannot guarantee absolute security.
4. Sharing Your Information
We may share your information in the following circumstances:
- With Third-Party Service Providers: We use third-party services (such as Stripe) to facilitate payments, store data, and deliver certain features. These service providers have access to your personal information only to the extent necessary to perform their services and are obligated not to disclose or use it for other purposes.
- Legal Compliance: We may disclose your personal information if required to do so by law, regulation, or legal process, or in response to requests from public authorities (e.g., government agencies, law enforcement).
- Business Transfers: In the event of a merger, acquisition, or sale of assets, your personal information may be transferred as part of the transaction. We will notify users of any such change and provide an opportunity to opt-out if applicable.
5. Your Rights and Choices
Under Australian privacy law, you have the right to access, correct, or request the deletion of your personal information. If you wish to exercise any of these rights, please contact us using the contact details provided below.
- Access and Correction: You can access and update your account information at any time by logging into your RiskSupport account. If you need assistance with this process, please contact our support team.
- Data Deletion: If you wish to delete your account or any personal information we have stored, please contact us, and we will process your request in accordance with legal requirements.
- Opt-Out of Communications: You can opt out of marketing communications at any time by following the unsubscribe instructions included in our emails.
6. Retention of Data
We will retain your personal information for as long as necessary to fulfil the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. Once your information is no longer required, we will take reasonable steps to securely delete or anonymise it.
7. Updates to This Privacy Policy
We may update this Privacy Policy from time to time. If we make material changes to the way we handle your personal information, we will notify you through the app or by email. We encourage you to review this policy periodically to stay informed about how we protect your information.
8. Contact Us
If you have any questions or concerns about this Privacy Policy or how your personal information is handled, please contact us.
By using RiskSupport, you acknowledge that you have read and understood this Privacy Policy and consent to the collection, use, and sharing of your information as described herein.