PP
LEGAL — PRIVACY POLICY

Your data, itemised.

A proof company should be able to prove what it knows about you. Here's the full ledger — what we collect, why, how long we keep it, and the things we'll never do with it.

VERSION 1.3LAST UPDATED — 23 JUL 2026AUSTRALIAN PRIVACY PRINCIPLESNEVER SOLD ✓
01

The ledger

Everything we hold, in one table. Nothing is collected that isn't on it.

WHATWHY WE HOLD ITKEPT FOR
Contact & billingRunning your bookings, invoices, proof reports and replies.7 YRS (TAX LAW)
Quote map shapesThe patches you pick, so quotes and rebooks are one click.24 MONTHS
Walker GPS tracesThe proof itself — route, timestamps, coverage on your report.3 YEARS
QR scan eventsSuburb-level counts for your dashboard and analytics. No names, no profiles.24 MONTHS
Pickup photosPhotographic count of your flyer batch at handover.3 YEARS
Site & ad analyticsHow you found us and how the site gets used — via tools like Google Analytics and PostHog, plus conversion events from the ad platforms we advertise on.PER TOOL, ≤ 26 MO
Support messagesContext for your account, so you never re-explain a problem.24 MONTHS
02

What we never do

Sell or rent your data. To anyone, for any price, ever.
Identify householders. We prove streets were walked — we don't record who lives on them.
Track walkers off-shift. GPS runs from route start to route end. Full stop.
03

We track runs, not people

Walker GPS is the backbone of the product, so we hold ourselves to a hard rule: tracking starts when a walker taps "start run" and stops when they tap "end run". Nothing is recorded outside those two taps — not their commute, not their lunch, not their weekend.

Clients see the route and timestamps on their patch. They never see a walker's full name, phone number, or anything beyond the run they paid for.

START TAP → END TAP ONLYFIRST NAME + INITIAL ON REPORTSWALKERS SEE THEIR OWN DATA
04

QR scans

When someone scans your flyer's QR code, we log the suburb code, a timestamp, and a coarse device type — enough to count and compare, nothing that identifies the scanner. No cookies are set on their device by our redirect.

If you point the QR at your own site with your own analytics, what happens there is governed by your privacy policy, not this one.

05

Who else touches it

Five categories of processor, each seeing only what their job requires: a payment provider (card details never touch our servers), a print partner (artwork and quantities only), cloud hosting in Australian regions, an email service for reports and receipts, and analytics & advertising tools — Google Analytics, PostHog, and conversion pixels from platforms we advertise on, such as Meta and Google. Ad platforms process those events under their own policies; the current tool list is available on request.

Beyond that, we disclose personal information only when the law compels us to, and we tell you when we're allowed to.

06

Security

Data is encrypted in transit and at rest, access is role-based and logged, and retention windows from the ledger are enforced by deletion jobs, not good intentions. If a breach ever puts you at real risk, you hear it from us first — within 72 hours of us knowing, alongside the OAIC notification the law requires.

07

Your rights

Under the Australian Privacy Principles you can ask for a copy of everything we hold on you, correct it, or have it deleted (except what tax law makes us keep). Email privacy@trypatch.com.au — we answer within 5 business days, no forms, no fee. Not satisfied? You can complain to the OAIC at oaic.gov.au.

08

Cookies & changes

This site sets analytics and advertising cookies — tools like Google Analytics and PostHog, and conversion pixels from the platforms we advertise on. They tell us which pages work and which ads earn their keep; block them in your browser and the site still works fine. When this policy changes, the version number and date at the top change with it, and material changes are emailed to customers 14 days ahead.