Apptimistic Pty Ltd (“we,” “us”) takes privacy seriously - not as a compliance exercise, but as a basic condition of being a firm worth working with. This policy explains what personal information we collect, how we use it, who we share it with, and the rights you have over it.
№ 01Who this applies to
This policy applies to anyone interacting with apptimistic.com, our forms, our newsletter, our booking widget, and any client or prospect we communicate with directly. We are bound by the Privacy Act 1988 (Cth) and the thirteen Australian Privacy Principles (APPs).
№ 02What we collect
We collect only what we need to run the firm. Specifically:
- Contact details you submit through forms or by email - name, business email, company, role, and anything else you choose to share.
- Booking data for strategy calls - calendar selections, timezone, and any notes you include.
- Engagement data for active clients - the information needed to deliver the work (project briefs, access credentials in scope, billing details).
- Technical data automatically logged when you visit the site - IP address, browser, device type, referring URL, and pages viewed. Used for security and to understand which content earns its keep.
- Newsletter signup - email address only, plus engagement metrics (opens, clicks) used to keep the list relevant.
We don't knowingly collect sensitive information (health, race, religion, biometric data, etc.) and we don't ask for it. If you send it to us unsolicited, we'll delete it.
№ 03Why we collect it
- To respond to enquiries and book calls.
- To deliver, manage, and invoice for active engagements.
- To send our newsletter (only to people who opted in).
- To improve the site - what gets read, what gets ignored, what breaks.
- To meet legal, accounting, and tax obligations in Australia.
№ 04Cookies & analytics
We use a minimal set of cookies and a privacy-respecting analytics tool to count visits and understand which pages perform. We don't use third-party advertising cookies, retargeting pixels, or cross-site tracking. Your browser's “Do Not Track” signal is respected.
You can block cookies in your browser settings. If you do, the site will keep working - you might just lose a few small conveniences like remembered form state.
№ 05Who we share it with
We don't sell your data. We share personal information only with:
- Trusted service providers who help us run the firm - email delivery, calendar booking, analytics, hosting, payment processing, and accounting. Each is bound by contract to use your data only for the agreed purpose and to protect it appropriately.
- Our specialist partners when they're named on your engagement and need the information to deliver the work. They sign confidentiality agreements with us before they see anything.
- Regulators, auditors, or courts where required by Australian law.
We do not share your personal information with anyone outside that list without your consent.
№ 06International transfers
Some of our service providers (e.g. email and analytics) process data in the United States, the European Union, or other jurisdictions. When that happens, we only use providers that offer protections substantially equivalent to the APPs and we take reasonable steps to ensure compliance with APP 8.
№ 07How long we keep it
- Enquiry data: 24 months from last contact, then deleted.
- Client engagement data: retained for the duration of the engagement plus 7 years for tax / record-keeping obligations.
- Newsletter subscriber data: until you unsubscribe (which you can do from every email).
- Server / analytics logs: 90 days for raw logs, indefinitely for aggregated, non-identifying data.
№ 08Security
We use reasonable technical and organisational measures to protect personal information - encryption in transit, encryption at rest where appropriate, role-based access, MFA on all admin accounts, and reviewed access lists. No system is bulletproof. If we ever experience a breach that's likely to cause serious harm, we'll notify affected individuals and the Office of the Australian Information Commissioner (OAIC) as required by the Notifiable Data Breaches scheme.
№ 09Your rights
Under Australian privacy law, you can:
- Ask what personal information we hold about you.
- Ask us to correct anything that's wrong.
- Ask us to delete it (subject to legal retention obligations).
- Withdraw consent for marketing at any time.
- Complain about how we've handled your information.
Email hello@apptimistic.comand a senior will respond - target turnaround is 5 business days, hard cap 30 days. If you're not satisfied with how we've handled your complaint, you can escalate to the OAIC at oaic.gov.au.
№ 10Children
Our services are aimed at businesses, not children. We don't knowingly collect personal information from anyone under 16. If you believe a minor has submitted information to us, email us and we'll delete it.
№ 11Changes to this policy
We'll update this policy when our practices change. The “Effective” date at the top reflects the current version. Material changes will be flagged at least 30 days in advance to active clients and newsletter subscribers.
№ 12Contact
Privacy questions or requests go to hello@apptimistic.com. Postal: Apptimistic Pty Ltd, Melbourne, Victoria, Australia.
We collect only what we need to talk to you, deliver work, and meet our tax obligations. We don't sell your data, we don't retarget you across the web, and we respect Do Not Track. You can ask us what we hold and ask us to delete it. We're bound by the Australian Privacy Principles.