Privacy Policy

This policy explains how My Journey Analytics Pty Ltd ("we", "us") handles personal information. We are bound by the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). Where the EU or UK General Data Protection Regulation (GDPR) applies to our handling of your information, we also comply with it.

Who this policy covers

It covers information we decide how to use, as a controller:

• people who visit this website;
• our customers' staff who sign up for, use or administer a My Journey Analytics workspace;
• people who contact us, request a setup, or receive our emails.

It does not cover data our customers collect with My Journey Analytics. When a business uses our service to understand visits to its own website or app, that business decides what is collected and why, and is responsible for it. We process that data only on the business's behalf and on its instructions, under our Data Processing Addendum. If you visited a website that uses My Journey Analytics, please read that website's privacy policy, and contact that business to exercise your rights. If you contact us instead, we will pass your request to them.

What we collect

We do not knowingly collect sensitive information about you. Please do not send it to us.

How we use it

We use personal information to:

• set up, provide, secure and support your workspace;
• manage billing and our relationship with your organisation;
• communicate about the service, including security and service notices;
• understand and improve our website and service;
• send product news, where the law allows and with an easy way to unsubscribe;
• meet our legal obligations and protect our rights.

Where the GDPR applies, we rely on: performing our contract with you or your organisation; our legitimate interests in running and improving a secure service; your consent, where we ask for it; and compliance with legal obligations.

Cookies and our website analytics

This website uses its own first-party analytics to understand which pages are useful. It does not use third-party advertising cookies. The analytics app uses cookies and local storage that are necessary for signing in and keeping you signed in.

Who we share it with

We share personal information only as needed to run our business:

• Service providers who host and operate our service and website, send email, or provide optional AI features. They are listed on our Subprocessors page, and may only use the information to provide services to us.
• Professional advisers, such as lawyers and accountants, under duties of confidentiality.
• Authorities, where the law requires it.
• A buyer or successor, if our business is sold or restructured, subject to this policy.

We do not sell personal information.

Overseas disclosure

Workspaces in our Australian region store their data in Sydney, Australia. Some of our providers operate globally or from other countries, so personal information may be accessed or processed outside Australia, including in the United States and other countries where those providers operate (for example, for network delivery, email sending or AI features you choose to use). Our Subprocessors page shows the location of each. We take reasonable steps, including contractual commitments, to ensure overseas recipients handle personal information consistently with the APPs. Where the GDPR applies, we use recognised safeguards for international transfers, such as standard contractual clauses.

How we protect it

We use measures appropriate to the information we hold, including encryption in transit, access controls limited to staff who need access, multi-factor authentication for administrative systems, and logging and monitoring of our infrastructure. No system is completely secure, and we will notify you and the regulator as the law requires if a data breach is likely to result in serious harm.

How long we keep it

We keep account and billing information while your organisation is a customer, and afterwards for as long as needed to meet legal, tax and accounting obligations (generally 7 years for financial records). Website analytics are kept for 26 months. When information is no longer needed, we delete or de-identify it.

Your rights

You can ask to access the personal information we hold about you, and to correct it. Depending on where you live, you may also be able to ask us to delete it, restrict or object to how we use it, receive a copy in a portable format, or withdraw consent you have given. To make a request, email [email protected]. We will respond within a reasonable time (generally 30 days) and may need to confirm your identity first.

Complaints

If you have a concern about how we have handled your personal information, please contact us first at [email protected], and we will respond within 30 days. If you are not satisfied with our response, you can complain to the Office of the Australian Information Commissioner at oaic.gov.au, or, if you are in the EU or UK, to your local data protection authority.

Children

Our service is for businesses and is not directed at children.

Changes to this policy

We may update this policy. We will post the new version here with its effective date, and tell customers about significant changes by email or in the app.

Contact us

My Journey Analytics Pty Ltd. Email: [email protected].