Privacy policy

1. Who we are

ScheduleOne is provided by Better Frameworks Pty Ltd, ABN 21 685 982 003 ("we"). We handle personal information in line with the Privacy Act 1988 (Cth) and the Australian Privacy Principles. This policy covers the ScheduleOne website and app. Contact us at [email protected].

2. What we collect

Most of what you enter in ScheduleOne is about your organisation, not about individuals. Please don't enter other people's personal information in notes or free-text fields. ScheduleOne doesn't need it.

You can browse our website without giving us personal information. If you choose not to give us the information above, we can't provide the app.

3. Why we use it

• To create and run your account, log you in securely and provide the service.
• To take payment, issue tax invoices, and manage renewals and cancellations.
• To send emails about your account: welcome and login emails, law changes affecting your schedule, renewal and deletion notices.
• To keep the service secure, including noticing a login being shared or misused.
• To fix problems and improve ScheduleOne.
• To produce anonymised, aggregated benchmarks of schedule decisions. These never include names, logins or anything typed in (see section 8 of the Terms).

Automated decisions. ScheduleOne works out by computer which legal requirements may apply to an organisation, from answers about that organisation. It doesn't use personal information to make decisions about individuals, and nothing it does automatically significantly affects anyone's rights or interests.

We don't sell personal information or use it for advertising. We only send marketing emails if you agree to them, and every marketing email has an unsubscribe link.

4. Who we share it with, and where it is held

We use a small number of service providers to run ScheduleOne. They handle personal information only to provide their service to us:

This means your personal information is disclosed overseas, to the countries above. We take reasonable steps to make sure these providers protect it in a way consistent with the Australian Privacy Principles, through their terms and data processing agreements.

We may also disclose personal information where the law requires it, or to our professional advisers (for example, our accountant) under a duty of confidence.

5. How long we keep it

6. How we keep it secure

All connections to ScheduleOne are encrypted (HTTPS). Passwords are stored only in a scrambled form that can't be reversed. You can turn on two-step verification. Each organisation's data is visible only to that organisation's logins, and to our staff where needed to support you. Access to the systems that run ScheduleOne is limited and protected with two-step verification.

If a data breach is likely to result in serious harm to you, we will notify you and the Office of the Australian Information Commissioner as the Notifiable Data Breaches scheme requires.

7. Cookies

The app uses only the cookies it needs to work: one to keep you logged in, and one that protects forms against misuse. The app doesn't use analytics or advertising cookies.

On our website, Cloudflare Web Analytics counts visits for everyone. It doesn't use cookies, doesn't track you across other websites, and doesn't identify you.

When you first visit, we ask whether we may also use Google Analytics. It runs only if you say yes. It sets cookies (whose names start with _ga) to recognise a returning browser, and tells Google which pages you visit, how you arrived (for example from a search or a link), your general location, and your device and browser type. We use it to understand which pages are useful and whether people join the waiting list; Google Analytics doesn't store your internet (IP) address, we don't use it for advertising, and we don't combine it with your account. Google holds this information in the United States and other countries, under its own terms. You can change your choice at any time with Cookie settings at the bottom of each page.

8. Access, correction and complaints

You can see and correct most of your information in the app. You can also ask us for a copy of the personal information we hold about you, or ask us to correct it, by emailing [email protected]. We will respond within 30 days. If we can't do what you ask, we will explain why.

If you have a concern about how we have handled your personal information, please contact us first, and we will respond within 30 days. If you are not satisfied with our response, you can complain to the Office of the Australian Information Commissioner (oaic.gov.au).

9. The waiting list

Before ScheduleOne opens, you can join a waiting list on our website.

• What we collect: your name, work email address and organisation's name. Mailchimp also records when and from where you signed up and confirmed, as evidence of your consent.
• Why: to tell you when ScheduleOne opens, and to send occasional updates about it. Nothing else, and we don't sell or share the list.
• Where it is held: with Mailchimp, operated by Intuit in the United States. This is an overseas disclosure under APP 8; Mailchimp handles it under its own privacy terms and data processing agreement.
• Opens and clicks: Mailchimp records whether you open our emails and which links you click, using a small image and tracked links in each email. We use this only to see whether our emails are useful.
• Confirming: we send one email asking you to confirm your address. If you don't confirm, you won't be added to the list.
• Leaving: every email has an unsubscribe link, or email us at[email protected]. Once you unsubscribe we stop emailing you.
• How long: until you unsubscribe, or until we close the waiting list after launch, whichever comes first. If you then buy ScheduleOne, the rest of this policy applies to your account.

10. Changes to this policy

We will update this policy if how we handle personal information changes, and show the date of the latest version at the top. If a change materially affects you, we will tell you by email before it takes effect.