DataSentry helps Australian businesses prepare for the Privacy Act 2024 reforms. We hold ourselves to the same standard we help our clients meet — which is why this policy spells out plainly who we share your information with, how long we keep it, and how you can have it removed. If anything here is unclear, email privacy@datasentry.com.au and we’ll fix it.

How to delete your data

Email privacy@datasentry.com.au with “Please delete my data” in the subject line.

We acknowledge within 2 business days and complete deletion within 30 days. Records we’re legally required to keep (e.g. financial records, typically 7 years) are noted in Section 7.

1. Introduction

DataSentry (ABN 90 658 855 013) (“we”, “us”, or “our”) is committed to protecting your privacy in accordance with the Privacy Act 1988 (Cth) (Australia’s main privacy law), the Australian Privacy Principles (the APPs — the 13 rules under that Act for handling personal information), and the reforms introduced under the Privacy and Other Legislation Amendment Act 2024 (the “Privacy Act 2024 reforms” — the recent amendments that strengthen Australian privacy law).

This Privacy Policy explains how we collect, use, disclose, store, retain, and protect personal information when you use our website, our tools, and our services, or otherwise interact with our business.

2. Information we collect

We may collect the following types of personal information:

Contact information: name, email address, phone number, and business address.
Business information: company name, industry, business size, and role/position.
Enquiry and assessment details: information you provide when contacting us, including the nature of your enquiry, your answers to our self-assessment quizzes, and any specific requirements.
Technical information: IP address, browser type, device information, and website usage data collected through cookies, analytics tools, and our CRM’s visitor tracking.

3. How we collect information

We collect personal information:

Directly from you when you complete our contact form, fill out a self-assessment quiz, or request a downloadable resource.
When you communicate with us via phone, email, or in person.
Through our website using cookies, analytics tools, and our CRM’s visitor tracking script.
From third-party sources such as referrals or business partners.

4. How we use your information

We use your personal information to:

Respond to your enquiries and deliver the services or resources you have requested.
Deliver and improve our advisory, CRM, website, and platform services.
Communicate with you about the services and resources you have engaged with us about (including follow-up about a quiz result or contact form submission).
With your express consent (via an opt-in checkbox on our forms), send you periodic guidance and updates from DataSentry. You can withdraw that consent at any time — see Section 8 (Direct Marketing).
Analyse website usage and improve user experience.
Comply with our legal obligations and protect our legal rights.

5. Disclosure of information

We may share your personal information with:

DSConnect: our white-labelled deployment of GoHighLevel, a US-based CRM platform. We use DSConnect to run our own business and also offer it to Australian businesses as a managed service. Contact records, quiz submissions, and enquiry details are stored in DSConnect. The underlying GoHighLevel infrastructure is based in the United States, under their data processing agreement, which requires handling aligned with the APPs (the Australian Privacy Principles).
Website infrastructure providers: our website is hosted on Vercel (Sydney region); analytics are managed through Google Tag Manager (which may include Google Analytics).
Email and communication services: third-party providers used to deliver transactional and (with your consent) marketing emails.
Professional advisers: lawyers, accountants, and other professionals as required.
Government authorities: where required by law, or to protect our legal interests.

Where information is disclosed to a recipient outside Australia, we take reasonable steps to ensure the recipient complies with the APPs in line with APP 8 (the cross-border disclosure rule — when we send information overseas, we stay responsible for how it’s handled).

We do not sell your personal information to third parties.

6. Data storage and security

We take reasonable steps to protect your personal information from misuse, interference, loss, and unauthorised access, modification, or disclosure. This includes:

Encrypted data transmission (SSL/TLS) on all forms and APIs.
Access controls limiting who within DataSentry can view personal information.
Regular review of our security posture and vendor controls.

Your data sits in one of three places: DSConnect (United States, see Section 5); Google Tag Manager and, where enabled, Google Analytics (United States, via Google); and our website itself (Vercel, Sydney region). In every case we require providers to handle your information consistent with the APPs.

7. Data retention

We retain your personal information only for as long as we reasonably need it, in line with APP 11 (the rule that says we should only keep your information as long as we actually need it).

Active contacts: while you remain an active prospect, customer, or subscriber.
Inactive contacts: for a reasonable follow-up window after our last interaction, after which records are archived or de-identified.
Records we are required to keep: certain records (for example, financial and tax records) are retained for the period required by Australian law — typically seven years.

You can request deletion of your personal information at any time — see the “How to delete your data” callout at the top of this page, or email privacy@datasentry.com.au. Where we are not legally required to keep a record, we will action your request promptly.

8. Direct marketing

We only send direct marketing communications (such as periodic guidance emails) to people who have given us their express consent — typically via an opt-in checkbox on one of our forms.

Every commercial email we send includes a working one-click unsubscribe link, in line with the Spam Act 2003 (Cth) (the law requiring marketing emails to honour unsubscribe requests). You can also opt out at any time by emailing privacy@datasentry.com.au. Once you opt out, we will stop sending you marketing communications, although we may still need to contact you about a service you have actively engaged us for.

9. Data breach notification

DataSentry complies with the Notifiable Data Breaches scheme under Part IIIC of the Privacy Act 1988 (the section that requires us to tell you and the regulator if your data is exposed in a way that could seriously harm you). If we become aware of an eligible data breach involving your personal information that is likely to result in serious harm, we will notify both you and the OAIC (the Office of the Australian Information Commissioner — the federal regulator for privacy) as required by law, and outline the steps you can take to protect yourself.

10. Cookies and analytics

Our website uses cookies and similar technologies to improve your experience and analyse website traffic. You can manage cookie preferences through your browser settings.

We use Google Tag Manager to manage our analytics and measurement tags, which may include Google Analytics. These tools help us understand how visitors use our website in aggregate so we can improve it. We also use a first-party visitor tracking script from DSConnect — once you submit a form, this lets us connect your past visits to your enquiry so we can respond in context (for example, “I see you read our retention guide before reaching out”). You can ask us to disconnect this association at any time by emailing privacy@datasentry.com.au.

What we don’t do:

We don’t sell your information to anyone.
We don’t profile you to make automated decisions about you.

11. Your rights

Under Australian privacy law, you have the right to:

Access: request access to the personal information we hold about you.
Correction: request correction of inaccurate, incomplete, or outdated information.
Opt out of direct marketing: withdraw your consent to marketing emails at any time (see Section 8).
Deletion: request deletion of your personal information, subject to any records we are legally required to retain (see Section 7).
Complaint: lodge a complaint with us if you believe we have breached your privacy. If you are not satisfied with our response, you can escalate to the OAIC.

To exercise any of these rights, please contact us using the details below.

12. Third-party links

Our website may contain links to third-party websites. We are not responsible for the privacy practices of these websites. We encourage you to review their privacy policies before providing any personal information.

13. Changes to this policy

We may update this Privacy Policy from time to time, including in response to further Privacy Act 2024 reforms as they come into effect. Any changes will be posted on this page with an updated “Last updated” date. We encourage you to review this policy periodically.

14. Contact us

If you have any questions about this Privacy Policy, want to exercise any of the rights described above, or wish to make a complaint, please contact us:

DataSentry

ABN: 90 658 855 013
Privacy Email: privacy@datasentry.com.au
Phone: +61 468 000 044(call or text)
Office: 35 Access Way, Carrum Downs VIC 3201

For more information about privacy in Australia, or to lodge a complaint, visit the Office of the Australian Information Commissioner (OAIC).