Privacy Policy

1. Who we are

Impact Analytics Australia Pty Ltd (ACN / ABN registered) operates the HIVE, COMPASS, and MERIDIAN intelligence platforms, as well as the website at impactanalyticsaustralia.com.au (the "Site"). In this policy, "we", "us", and "our" refers to Impact Analytics Australia Pty Ltd.

We are committed to protecting your privacy in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

2. What information we collect

2.1 Information you give us

• Name, work email address, and organisation when you submit a demo request or contact form
• Account details (name, email, organisation) when you register to use one of our platforms
• Correspondence and feedback you send us

2.2 Information collected automatically

• Browser type, operating system, IP address, and referring URL via server logs
• Pages visited, session duration, and navigation paths via analytics (Vercel Analytics / similar)
• Cookies as described in Section 7 below

2.3 What we do NOT collect

• We do not collect payment card details — all transactions are handled by Stripe
• We do not collect sensitive information (health, financial, or government identifiers) unless required for a specific platform feature you have opted into

3. How we use your information

We use collected information to:

• Provide, maintain, and improve our platforms and the Site
• Respond to demo requests, enquiries, and support issues
• Send transactional communications (account creation, billing notifications)
• Send product updates and announcements — with your consent, and with an easy opt-out
• Comply with our legal obligations under Australian law
• Detect and prevent fraud or abuse of our platforms

We do not sell, rent, or trade your personal information to any third party.

4. How we share your information

We share personal information only where necessary:

• Service providers: hosting (Vercel), email delivery (Google Workspace), payment processing (Stripe), form handling (Formspree). Each is bound by their own privacy commitments.
• Legal requirements: if required by Australian law, court order, or regulatory authority
• Business transfers: in the event of a merger, acquisition, or asset sale, personal information may be transferred — we will notify affected users

5. Data storage and security

Your data is stored on infrastructure operated by Vercel (US-based CDN with Australian edge nodes) and our cloud providers. We apply industry-standard security measures including TLS encryption, access controls, and regular security reviews.

No transmission over the internet is completely secure. While we take all reasonable steps to protect your information, we cannot guarantee absolute security.

6. Data retention

We retain personal information for as long as necessary to provide our services and comply with legal obligations. Contact form submissions are retained for 2 years. Account data is retained for the life of the account plus 12 months. You may request deletion at any time (see Section 9).

7. Cookies

We use cookies and similar technologies to operate and improve our platforms. These include:

• Strictly necessary cookies: required for authentication and session management
• Analytics cookies: used to understand how visitors use the Site (e.g. Vercel Analytics — privacy-focused, no fingerprinting)

You can control cookies through your browser settings. Disabling cookies may affect platform functionality.

8. Third-party links

Our Site and platforms may link to third-party websites (e.g. compassndis.com.au, NDIA, ABS). We are not responsible for the privacy practices of those sites. We encourage you to read their privacy policies.

9. Your rights

Under the Privacy Act 1988 (Cth) and the Australian Privacy Principles, you have the right to:

• Access the personal information we hold about you
• Correct information that is inaccurate or out of date
• Delete your personal information (subject to legal retention obligations)
• Opt out of marketing communications at any time
• Complain to the Office of the Australian Information Commissioner (OAIC) if you believe we have breached the APPs

To exercise any of these rights, contact us at sunny@impactanalyticsaustralia.com.au. We will respond within 30 days.

10. Children's privacy

Our platforms are designed for business and professional use. We do not knowingly collect personal information from anyone under the age of 18.

11. Changes to this policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top of this page will reflect the most recent revision. Significant changes will be communicated to registered users via email.

12. Contact us

For privacy-related enquiries or complaints: