This policy explains what personal information Firm Footing collects through this website, why, and what we do with it. We handle personal information in line with the Australian Privacy Principles in the Privacy Act 1988 (Cth).
Firm Footing is a project being set up in Queensland, Australia, and it isn't trading yet. In this policy, "Firm Footing", "we" and "us" means the person running it, who you can contact at [[CONTACT EMAIL]]. When Firm Footing starts trading, we'll update this policy with its registered business details.
The short version
- You can use the check without giving us your name or contact details.
- We keep your check answers without anything that identifies you, unless you choose to join our email list.
- We only email you if you tick the box asking us to, and you can unsubscribe at any time.
- We don't sell personal information.
- We never ask for information about NDIS participants, and you shouldn't give us any.
What we collect
When you do the check
We store your answers to the check questions: your registration status, the supports you deliver, how you work, how your participants are funded, which basics you have in place, and your answer to the optional pricing question. We also store the result the check showed you.
With those answers we store where your visit came from: the website that referred you, the page you landed on, and any campaign tags in the link you followed (for example, which ad you clicked). We don't store your name, email, IP address or anything else that identifies you with these answers.
When you join the email list
If you choose to join, we collect your first name and email address, and your business name and state if you give them. We also record that you agreed to receive emails, the exact wording you agreed to, and when. We link your details to your check answers so our emails can match your situation.
When you contact us
If you email us, we keep your email and our reply.
Automatically
Our hosting and database providers keep standard logs, which include IP addresses and browser details, to keep their services running and secure. These logs are separate from your check answers and are kept for a limited time under the providers' own policies. If we've switched on Google Analytics, it uses cookies to collect information about how visitors use the site, such as pages viewed, rough location, device type and whether the check was completed. We've turned off Google Signals, and we don't send your name, email or check answers to Google.
What we don't want
Please don't give us any information about the people you support: names, health or disability details, NDIS numbers or anything similar. The check doesn't ask for it, and our forms aren't built to protect it to the standard it needs.
Why we collect it
- To show you your result.
- To send you the emails you asked for, including when the official list of supports is published, updates about the registration changes, and news about our readiness pack.
- To understand how many providers are likely to be affected and which supports come up most, so we can improve the check and decide what to build.
- To work out which of our ads and posts are useful, so we don't waste money on the ones that aren't.
- To reply when you contact us.
- To meet our legal obligations.
Emails
We only send marketing emails if you've ticked the box giving us permission. Every email identifies us and includes a way to unsubscribe, as required by the Spam Act 2003 (Cth). If you unsubscribe, we'll stop within five working days. We may keep a record that you unsubscribed so we don't email you again by mistake.
Who we share it with
We use these service providers to run the site. They handle personal information on our behalf:
| Provider | What they do | Where data may be held |
|---|---|---|
| Cloudflare | Hosts this website and keeps server logs | Cloudflare's global network, including the United States |
| Supabase | Stores check answers and email list details | Sydney, Australia, with support access possible from other countries |
| Google Analytics (if switched on) | Measures how the site is used | United States and other countries where Google operates |
| Email service | Will send our emails | We'll name the service and where it holds data here before we send the first email |
We don't sell or rent personal information. We don't share it with anyone else unless the law requires us to.
How we protect it
The website can only add new records to our database. It can't read, change or delete them. Only we can see the records, through password-protected accounts. No system is completely secure, but we take reasonable steps to protect what we hold.
How long we keep it
- Check answers without your details: up to three years, then deleted.
- Email list details: until you unsubscribe or ask us to delete them, then deleted within 30 days, apart from the unsubscribe record mentioned above.
- Emails you send us: for as long as we need them to deal with your enquiry, and no longer than two years.
Your choices
- You can use the check without joining the email list.
- You can unsubscribe from our emails at any time.
- You can ask what personal information we hold about you, and ask us to correct or delete it, by emailing [[CONTACT EMAIL]]. We'll reply within 30 days.
- You can block or delete cookies in your browser settings, or use Google's opt-out browser add-on for Google Analytics.
Complaints
If you're unhappy with how we've handled your personal information, email us at [[CONTACT EMAIL]] and we'll respond within 30 days. If you're not satisfied with our response, you can complain to the Office of the Australian Information Commissioner at oaic.gov.au or on 1300 363 992.
Changes to this policy
We'll update this page if we change how we handle personal information, for example when we start trading or selling the readiness pack. The date at the top shows when it last changed.
Contact
Firm Footing
Email: [[CONTACT EMAIL]]